Certified in Risk and Information Systems Control (CRISC) — Question 458

The FIRST task when developing a business continuity plan should be to:

Answer options

• A. identify critical business functions and resources.
• B. determine data backup and recovery availability at an alternate site.
• C. define roles and responsibilities for implementation.
• D. identify recovery time objectives (RTOs) for critical business applications.

Correct answer: A

Explanation

The correct answer is A because identifying critical business functions and resources is essential to understanding what needs to be protected and prioritized in a business continuity plan. The other options, while important, are secondary steps that depend on having a clear understanding of the critical functions first.