Are you studying for the CISA certification?
Skillset can help you prepare! Sign up for your free Skillset account and take the first steps towards your certification.
Skillset can help you prepare! Sign up for your free Skillset account and take the first steps towards your certification.
The project to update the disaster recovery plan has been completed. During the project review, which of the following would an IT auditor consider to be the highest risk?
The disaster recovery strategy does not include the use of a hot site.
The business impact analysis (BIA) was conducted, but the results were not used.
Full testing of the DRP has not been performed.
The disaster recovery project manager for the implementation suddenly leaves the organization.
The risk of not using the results of the BIA for disaster recovery planning means that the DRP may not be designed to recover the most critical assets in the correct order. As a result, the plan may not be adequate to allow the organization to recover from a disaster. Although testing a DRP is a critical component of a successful disaster recovery strategy, this is not the biggest risk; the biggest risk comes from a plan which is not properly designed. Use of a hot site is a strategic determination based on tolerable downtime, cost and other factors. Although using a hot site may be considered a best practice, this is a very costly solution that may not be required for the organization. If the DRP is designed and documented properly, the loss of an experienced project manager should have minimal impact. The risk of a poorly designed plan which may not meet the requirements of the business is much more significant than the risk posed by loss of the project manager.
Study thousands of practice questions that organized by skills and ranked by difficulty.
Create a tailored training plan based on the knowledge you already possess.
Know when you’re ready for the high-stakes exam. Have the confidence that you will pass on your first attempt.