Certified in Risk and Information Systems Control (CRISC) — Question 354

Which of the following is the BEST indication of the effectiveness of a business continuity program?

Answer options

• A. Business continuity tests are performed successfully and issues are addressed.
• B. Business continuity and disaster recovery plans are regularly updated.
• C. Business impact analyses (BIAs) are reviewed and updated in a timely manner.
• D. Business units are familiar with the business continuity plans (BCPs) and process.

Correct answer: A

Explanation

The correct answer, A, highlights that successful tests of business continuity programs and the resolution of issues show practical effectiveness. While options B, C, and D indicate important activities related to continuity, they do not directly measure the success of the program in real scenarios as option A does.