Certified in Risk and Information Systems Control (CRISC) — Question 126

The BEST method to align an organization's business continuity plan (BCP) and disaster recovery plan (DRP) with core business needs to:

Answer options

• A. outsource the maintenance of the BCP and DRP to a third party
• B. include BCP and DRP responsibilities as part of the new employee training
• C. execute periodic walk-throughs of the BCP and DRP
• D. update the business impact analysis (BIA) for significant business changes

Correct answer: C

Explanation

Executing periodic walk-throughs of the BCP and DRP ensures that the plans are tested and updated in line with current business operations, making them more effective. Outsourcing maintenance may lead to a disconnect with actual business needs, while including BCP and DRP responsibilities in training does not guarantee they are actively practiced. Updating the BIA is important but does not ensure alignment with the operational aspects as effectively as regular walk-throughs do.