Certified Information Systems Security Professional (CISSP) — Question 32

The disaster recovery (DR) process should always include:

Answer options

• A. periodic inventory review
• B. financial data analysis
• C. plan maintenance
• D. periodic vendor review

Correct answer: C

Explanation

The correct answer, C, is essential because maintaining the DR plan ensures it remains relevant and effective in the face of changing business needs and potential threats. Options A, B, and D, while important aspects of overall business operations, do not directly pertain to the ongoing effectiveness and accuracy of the disaster recovery plan.