Certified Information Security Manager (CISM) — Question 1041

Which of the following is the GREATEST benefit of performing a tabletop exercise of the business continuity plan (BCP)?

Answer options

• A. It helps in assessing the availability of compatible backup hardware.
• B. It identifies appropriate follow-up work to address shortcomings in the plan.
• C. It provides a low-cost method of assessing the BCP’s completeness.
• D. It allows for greater participation and planning from the business side.

Correct answer: B

Explanation

The correct answer, B, is accurate because the primary goal of a tabletop exercise is to pinpoint weaknesses in the BCP and determine necessary improvements. While the other options mention important aspects of the BCP, they do not capture the main purpose of identifying follow-up work to enhance the plan.