Certified Information Security Manager (CISM) — Question 620

Which of the following is the FIRST step in developing a business continuity plan (BCP)?

Answer options

• A. Identify critical business processes.
• B. Determine the business recovery strategy
• C. Determine available resources
• D. Identify the applications with the shortest recovery time objectives (RTOs)

Correct answer: A

Explanation

The first step in developing a business continuity plan is to identify critical business processes, as this establishes what is essential for the organization to remain operational. The other options focus on strategies and resources that are considered after the critical processes have been identified.