Certified Information Systems Security Professional (CISSP) — Question 117

Which of the following events prompts a review of the disaster recovery plan (DRP)?

Answer options

• A. Change in senior management
• B. Completion of the security policy review
• C. Organizational merger
• D. New members added to the steering committee

Correct answer: C

Explanation

A corporate merger can significantly impact an organization's infrastructure, resources, and processes, thereby necessitating a review of the disaster recovery plan to adapt to new operational realities. The other options, while important, do not inherently trigger a need to reassess the DRP as they do not usually affect the core recovery strategies.