Certified in Risk and Information Systems Control (CRISC) — Question 565

An organization has operations in a location that regularly experiences severe weather events. Which of the following would BEST help to mitigate the risk to operations?

Answer options

• A. Conduct a business impact analysis (BIA) for an alternate location.
• B. Develop a business continuity plan (BCP).
• C. Prepare a disaster recovery plan (DRP).
• D. Prepare a cost-benefit analysis to evaluate relocation.

Correct answer: B

Explanation

A Business Continuity Plan (BCP) is essential for ensuring that operations can continue during and after severe weather events, making it the best choice. While a Business Impact Analysis (BIA) and a Disaster Recovery Plan (DRP) are important, they do not directly provide the actionable steps needed for ongoing operations like a BCP does. A cost-benefit analysis for relocation is not an immediate solution for mitigating operational risks.