Certified Information Security Manager (CISM) — Question 1012

Which of the following is the BEST way to ensure the business continuity plan (BCP) is current?

Answer options

• A. Manage business process changes.
• B. Update business impact analyses (BIAs) on a regular basis.
• C. Review and update emergency contact lists.
• D. Conduct periodic testing.

Correct answer: B

Explanation

Updating business impact analyses (BIAs) regularly ensures that the BCP reflects current business conditions and risks, making it the best option. While managing process changes, reviewing contact lists, and conducting testing are important, they do not provide the comprehensive update that regular BIA revisions do.