Certified in the Governance of Enterprise IT (CGEIT) — Question 247

When selecting a vendor to provide services associated with a critical application, which of the following is the MOST important consideration with respect to business continuity planning (BCP)?

Answer options

• A. Testing the vendor's BCP and analyzing the results
• B. Obtaining independent audit reports of the vendor's BCP
• C. Evaluating whether the vendor's BCP aligns with the enterprise's BCP
• D. Procuring a copy of the vendor's BCP during the contracting process

Correct answer: C

Explanation

The correct answer is C because it is essential for the vendor's BCP to be in harmony with the enterprise's BCP to ensure seamless integration and effectiveness during disruptions. Options A and B, while important, focus on testing and auditing rather than alignment. Option D is also relevant but does not address the necessity of coherence between the two BCPs.