Certified Information Systems Auditor (CISA) — Question 381

In the case of a disaster where the data center is no longer available, which of the following tasks should be done FIRST?

Answer options

• A. Arrange for a secondary site.
• B. Analyze risk.
• C. Perform data recovery.
• D. Activate the call tree

Correct answer: D

Explanation

The correct answer is D, as activating the call tree ensures that all relevant personnel are informed and can coordinate the response to the disaster. Options A, B, and C are important but should follow the immediate communication to get everyone on the same page for an effective recovery process.