CISA Certified Information Systems Auditor – Question1755 - CISA Certified Information Systems Auditor

The optimum business continuity strategy for an entity is determined by the:

A. lowest downtime cost and highest recovery cost.
B. lowest sum of downtime cost and recovery cost.
C. lowest recovery cost and highest downtime cost.
D. average of the combined downtime and recovery cost.

Correct Answer: B

Explanation:

Explanation:
Both costs have to be minimized, and the strategy for which the costs are lowest is the optimum strategy. The strategy with the highest recovery cost cannot be the optimum strategy. The strategy with the highest downtime cost cannot be the optimum strategy.
The average of the combined downtime and recovery cost will be higher than the lowest combined cost of downtime and recovery.