Certified Internal Auditor (CIA) Part 3: Business Knowledge for Internal Auditing — Question 139

An organization that relies heavily on IT wants to contain the impact of potential business disruption to a period of approximately four to seven days. Which of the following business recovery strategies would most efficiently meet this organization’s needs?

Answer options

• A. A recovery strategy whereby a separate site has not yet been determined but hardware has been reserved for purchase and data backups
• B. A recovery strategy whereby a separate site has been secured and is ready for use. with fully configured hardware and real-time synchronized data
• C. A recovery strategy whereby a separate site has been secured and the necessary funds for hardware and data backups have been reserved
• D. A recovery strategy whereby a separate site has been secured with configurable hardware and data backups

Correct answer: C

Explanation

Option C is correct because it ensures that a separate site is secured and funds are available for necessary equipment and backups, allowing for a swift recovery within the desired timeframe. Options A and D lack the assurance of secured funds and fully prepared resources, while option B, although ready, may not meet the four to seven days criterion if costs are not managed appropriately.