CISM Certified Information Security Manager – Question0398

In a business impact analysis, the value of an information system should be based on the overall cost:

A.
of recovery.
B. to recreate.
C. if unavailable.
D. of emergency operations.

Correct Answer: C

Explanation:

Explanation:
The value of an information system should be based on the cost incurred if the system were to become unavailable. The cost to design or recreate the system is not as relevant since a business impact analysis measures the impact that would occur if an information system were to become unavailable. Similarly, the cost of emergency operations is not as relevant.