CompTIA SecurityX (CAS-005) — Question 243

An organization is developing a disaster recovery plan that requires data to be backed up and available at a moment’s notice. Which of the following should the organization consider first to address this requirement?

Answer options

• A. Implement a change management plan to ensure systems are using the appropriate versions.
• B. Hire additional on-call staff to be deployed if an event occurs.
• C. Design an appropriate warm site for business continuity.
• D. Identify critical business processes and determine associated software and hardware requirements.

Correct answer: D

Explanation

Identifying critical business processes and their software and hardware needs is fundamental, as it lays the groundwork for effective disaster recovery by ensuring that the most important operations are prioritized. The other options, while important, do not address the immediate requirement of ensuring data availability in the event of a disaster.