Certified Information Systems Auditor (CISA) — Question 943

Which of the following controls is MOST crucial to ensure an organization will be able to recover its data from backup media in the event of a disaster?

Answer options

• A. Keeping a current inventory of backup media
• B. Encrypting data on backup media
• C. Periodically restoring backup media for key databases
• D. Storing backup media at an offsite facility

Correct answer: D

Explanation

Storing backup media at an offsite facility is essential for disaster recovery, as it protects data from local disasters that could affect the primary site. While keeping an inventory, encrypting data, and periodic restorations are important practices, they do not directly ensure the physical safety of backups in the event of a catastrophic event.