CISA Certified Information Systems Auditor – Question1761

The BEST method for assessing the effectiveness of a business continuity plan is to review the:

A.
plans and compare them to appropriate standards.
B. results from previous tests.
C. emergency procedures and employee training.
D. offsite storage and environmental controls.

Correct Answer: B

Explanation:

Explanation:
Previous test results will provide evidence of the effectiveness of the business continuity plan. Comparisons to standards will give some assurance that the plan addresses the critical aspects of a business continuity plan but will not reveal anything about its effectiveness. Reviewing emergency procedures, offsite storage and environmental controls would provide insight into some aspects of the plan but would fall short of providing assurance of the plan’s overall effectiveness.