Certified Information Systems Security Professional (CISSP) — Question 67

What is the FIRST step prior to executing a test of an organization's disaster recovery (DR) or business continuity plan (BCP)?

Answer options

• A. Develop clear evaluation criteria.
• B. Identify key stakeholders.
• C. Develop recommendations for disaster scenarios.
• D. Identify potential failure points.

Correct answer: A

Explanation

The correct answer is A, as developing clear evaluation criteria helps in assessing the effectiveness of the DR or BCP test. The other options, while important, do not directly relate to the preparatory step of establishing how the test will be evaluated.