CISM Certified Information Security Manager – Question0403

Which of the following would be MOST useful in developing a series of recovery time objectives (RTOs)?

A.
Gap analysis
B. Regression analysis
C. Risk analysis
D. Business impact analysis

Correct Answer: D

Explanation:

Explanation:
Recovery time objectives (RTOs) are a primary deliverable of a business impact analysis. RTOs relate to the financial impact of a system not being available. A gap analysis is useful in addressing the differences between the current state and an ideal future state. Regression analysis is used to test changes to program modules. Risk analysis is a component of the business impact analysis.