Certified Information Security Manager (CISM) — Question 651

When designing a disaster recovery plan (DRP), which of the following MUST be available in order to prioritize system restoration?

Answer options

• A. Key performance indicators (KPIs)
• B. Systems inventory
• C. Recovery procedures
• D. Business impact analysis (BIA) results

Correct answer: D

Explanation

The Business Impact Analysis (BIA) results are crucial because they assess the potential impact of different system failures and help prioritize which systems to restore first. While KPIs, systems inventory, and recovery procedures are important for the overall DRP, they do not specifically provide the prioritization needed for restoration based on business impact.