Certified Information Systems Auditor (CISA) — Question 301

When is the BEST time to commence continuity planning for a new application system?

Answer options

• A. Immediately after implementation
• B. Following successful user testing
• C. During the design phase
• D. Just prior to the handover to the system maintenance group

Correct answer: C

Explanation

The correct answer is C because continuity planning should be integrated into the design phase to ensure that all potential risks are addressed early on. Starting after implementation or user testing may lead to gaps in planning, while waiting until just before handover can result in inadequate preparation for ongoing support.