Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified in Risk and Information Systems Control · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
The business owner is the one who understands the criticality of the system to business operations. The BCP reflects business requirements, not just IT capabilities.
C. Consult with the business owner to update the BCP: Adjusting the BCP without senior management's oversight may lead to decisions that do not align with organizational priorities or resource capabilities. D. Consult with the IT department to update the RTO: Changing the RTO without considering business requirements and obtaining senior management approval may result in unrealistic recovery objectives or misallocation of resources. Answer is B
D. Consult with the IT department to update the RTO. When a risk practitioner finds a misalignment between the IT department's recovery time objective (RTO) and the enterprise's business continuity plan (BCP), the next step should be to "D. Consult with the IT department to update the RTO." It's important to ensure that the RTO of the key system aligns with the requirements of the BCP and the overall business needs. By consulting with the IT department, you can address the discrepancy and make necessary adjustments to the RTO to ensure it is consistent with the BCP.