CRISC Certified in Risk and Information Systems Control – Question496

The FIRST step for a startup company when developing a disaster recovery plan should be to identify:

A.
current vulnerabilities
B. a suitable alternate site
C. recovery time objectives
D. critical business processes

Correct Answer: D