CompTIA SecurityX (CAS-005) — Question 7

Company A is merging with Company B. Company A is a small, local company. Company B has a large, global presence. The two companies have a lot of duplication in their IT systems, processes, and procedures. On the new Chief Information Officer's (CIO's) first day, a fire breaks out at Company B's main data center. Which of the following actions should the CIO take first?

Answer options

• A. Determine whether the incident response plan has been tested at both companies, and use it to respond.
• B. Review the incident response plans, and engage the disaster recovery plan while relying on the IT leaders from both companies.
• C. Ensure hot, warm, and mobile disaster recovery sites are available, and give an update to the companies' leadership teams.
• D. Initiate Company A's IT systems processes and procedures, assess the damage, and perform a BIA.

Correct answer: B

Explanation

The correct answer is B because engaging both companies' IT leaders ensures a coordinated response and leverages combined resources effectively. Option A is too focused on testing the plan rather than immediate action. Option C, while important, does not prioritize the immediate response needed during a crisis. Option D would delay the response by focusing on Company A's processes without integrating Company B's critical input.