CRISC Certified in Risk and Information Systems Control – Question478

When reviewing a business continuity plan (BCP), which of the following would be the MOST significant deficiency?

A.
BCP is often tested using the walkthrough method
B. BCP testing is not in conjunction with the disaster recovery plan (DRP)
C. Each business location has separate, inconsistent BCPs
D. Recovery time objectives (RTOs) do not meet business requirements

Correct Answer: B