Certified Information Systems Auditor (CISA) — Question 608

A disaster recovery plan (DRP) should include steps for:

Answer options

• A. negotiating contracts with disaster planning consultants
• B. identifying application control requirements
• C. obtaining replacement supplies
• D. assessing and quantifying risk

Correct answer: C

Explanation

The correct answer is C, as obtaining replacement supplies is essential for restoring operations after a disaster. Options A, B, and D, while important in the broader context of disaster recovery, do not directly address the immediate need for resources to continue business functionality.