Certified Information Systems Auditor (CISA) — Question 1436

Which of the following is the BEST way to ensure that business continuity plans (BCPs) will work effectively in the event of a major disaster?

Answer options

• A. Regularly update business impact assessments.
• B. Prepare detailed plans for each business function.
• C. Make senior managers responsible for their plan sections.
• D. Involve staff at all levels in periodic paper walk-through exercises.

Correct answer: D

Explanation

Option D is correct because involving staff at all levels ensures that everyone understands the BCP and their roles, which enhances preparedness. While options A, B, and C are important for BCP development, they do not provide the same level of practical engagement and readiness that regular exercises do.