Certified Information Security Manager (CISM) — Question 975

Which of the following is MOST important to consider when choosing a shared alternate location for computing facilities?

Answer options

• A. Incident response team training
• B. The organization's risk tolerance
• C. The organization's mission
• D. Resource availability

Correct answer: B

Explanation

The organization's risk tolerance is crucial because it determines how much risk the organization is willing to accept regarding potential disruptions. While incident response training, mission considerations, and resource availability are important, they do not directly influence the fundamental ability to manage risk effectively in a shared alternate site scenario.