Certified in Risk and Information Systems Control (CRISC) — Question 410

All business units within an organization have the same risk response plan for creating local disaster recovery plans. In an effort to achieve cost effectiveness., the
BEST course of action would be to:

Answer options

• A. outsource disaster recovery to an external provider
• B. select a provider to standardize the disaster recovery plans
• C. evaluate opportunities to combine disaster recovery plans
• D. centralize the risk response function at the enterprise level

Correct answer: C

Explanation

The correct answer, C, is appropriate because combining disaster recovery plans can streamline processes and reduce costs. Options A and B suggest outsourcing or standardizing with a provider, which may not be as cost-effective as internally combining plans. Option D, while it centralizes risk response, may not necessarily lead to cost savings compared to combining existing plans.