CISM Certified Information Security Manager – Question1348

The business continuity policy should contain which of the following?

A.
Emergency call trees
B. Recovery criteria
C. Business impact assessment (BIA)
D. Critical backups inventory

Correct Answer: B

Explanation:

Explanation:
Recovery criteria, indicating the circumstances under which specific actions are undertaken, should be contained within a business continuity policy. Telephone trees, business impact assessments (BIAs) and listings of critical backup files are too detailed to include in a policy document.