Certified Information Security Manager (CISM) — Question 1063

Which of the following is the PRIMARY reason to regularly update business continuity and disaster recovery documents?

Answer options

• A. To ensure audit and compliance requirements are met
• B. To enforce security policy requirements
• C. To maintain business asset inventories
• D. To ensure the availability of business operations

Correct answer: D

Explanation

The correct answer is D because the primary goal of business continuity and disaster recovery plans is to guarantee that business operations can continue during and after a disruption. While options A, B, and C are important, they are secondary to the essential need to keep the business operational.