Certified Information Systems Auditor (CISA) — Question 1420

Backups will MOST effectively minimize a disruptive incident's impact on a business if they are:

Answer options

• A. taken according to recovery point objectives (RPOs).
• B. scheduled according to the service delivery objectives.
• C. performed by automated backup software on a fixed schedule.
• D. stored on write-once read-many media.

Correct answer: A

Explanation

The correct answer is A because recovery point objectives (RPOs) define the maximum acceptable amount of data loss measured in time, ensuring that backups are taken frequently enough to minimize disruption. Options B and C focus on scheduling and automation but do not directly address the critical need to align backups with RPOs. Option D, while relevant for data integrity, does not impact the frequency or timing of backups needed to minimize business disruption.