Certified in Risk and Information Systems Control (CRISC) — Question 272

Which of the following tasks should be completed prior to creating a disaster recovery plan (DRP)?

Answer options

• A. Procuring a recovery site
• B. Conducting a business impact analysis (BIA)
• C. Assigning sensitivity levels to data
• D. Identifying the recovery response team

Correct answer: B

Explanation

The correct answer is B, as conducting a business impact analysis (BIA) helps identify critical business functions and the impact of disruptions, which is essential for creating an effective DRP. Options A, C, and D are important steps but should be addressed after understanding the business needs through the BIA.