Certified in Risk and Information Systems Control (CRISC) — Question 1034

The FIRST step for a startup company when developing a disaster recovery plan should be to identify:

Answer options

• A. current vulnerabilities
• B. a suitable alternate site
• C. recovery time objectives
• D. critical business processes

Correct answer: D

Explanation

The correct answer is D, as identifying critical business processes is fundamental to understanding what needs to be protected and prioritized during a disaster recovery effort. Options A, B, and C are important aspects of disaster recovery but should come after recognizing the critical processes that drive the business.