Practice Test GeeksCISA - Certified Information Systems Auditor Practice Test
← All CISA Flashcard Decks

Business Continuity Planning Flashcards

7 cards from real CISA practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 7 Business Continuity Planning flashcards as text

  1. Which of the following BEST explains why a business continuity plan must be treated as a living document?

    Answer: Business processes, systems, personnel, and risks change over time, making static plans obsolete

    Organizations constantly change, so BCPs must be updated to reflect new systems, staff, processes, and threat landscapes to remain effective.

  2. An IS auditor is evaluating the adequacy of an organization's BCP. Which of the following would provide the MOST assurance that the plan is effective?

    Answer: Documented results from a recent successful full-scale test

    Actual test results demonstrating that recovery objectives were met provide the strongest evidence of BCP effectiveness.

  3. A financial services firm determines that its trading system has an MTD of 30 minutes. Which recovery strategy is MOST appropriate?

    Answer: Hot site with synchronous replication and automated failover

    A 30-minute MTD requires near-instant failover capability, only achievable through a hot site with real-time synchronous replication and automated switchover.

  4. When performing a BCP audit, an IS auditor discovers that critical recovery procedures are known only to a single IT administrator. This represents a risk of:

    Answer: Single point of failure in human knowledge—key-person dependency

    If critical recovery knowledge resides with only one person, that person's unavailability during a disaster could prevent successful recovery.

  5. Which of the following BEST demonstrates integration between information security and business continuity planning?

    Answer: Recovery procedures include requirements to maintain security controls and access restrictions during restoration

    True integration means security controls—authentication, encryption, access controls—are actively maintained and enforced throughout the recovery process.

  6. An organization wants to reduce its RTO from 8 hours to 1 hour. Which action would MOST directly achieve this goal?

    Answer: Upgrading from a cold site to a hot site with pre-configured systems

    Upgrading to a hot site with pre-configured, ready-to-use systems eliminates the time needed to procure, install, and configure equipment, directly reducing RTO.

  7. In BCP terminology, which term refers to the minimum level of services that must be maintained for the organization to survive a disaster?

    Answer: Minimum Business Continuity Objective (MBCO)

    MBCO defines the minimum level of services and/or products acceptable to achieve the business objectives during a disruption.