Đang chuẩn bị liên kết để tải về tài liệu:
The CISA Prep Guide Mastering the Certified Information Systems Auditor Exam phần 10

Tất cả các tài liệu liên quan, thủ tục, hướng dẫn sử dụng đào tạo, người sử dụng, hoạt động, và bảo trì hướng dẫn sử dụng cùng với sự phục hồi cần thiết và quan trọng và lập kế hoạch dự phòng tài liệu sẽ cần phải được cập nhật như những thay đổi xảy ra. | 522 Appendix A Answer B The correct answer is B. Obviously planning for the easy way out and only performing a recovery planning cycle to meet the requirement A will not result in a satisfactory recovery process for most businesses. Downtime C is not the only consideration when determining recovery strategies and overall loss reduction should be the paramount determining factor. Even though picking the most likely disaster scenario is the right way to proceed the existing processing configuration should not matter compared with the ability to recreate the user experience D . The overall cheapest solution considering all costs both related to out of pocket and related to downtime and customer impact while still meeting the business need will be the best answer. 6. A business continuity plan should address the recovery of A. All mission critical computer applications B. Only those applications related to generating revenue for the business C. All applications needing recovery within the first 24 hours after a disruption D. Applications and processes determined by management to be high priority to management Answer D The correct answer is D. Similar to the security discussions management has to make the decisions for what needs to be recovered so that the business they are accountable for survives. Business and operations management must educate them and provide them with the expertise to make risk-based decisions that will in the end be their responsibility. They alone must determine whether mission critical should be included on the list A or how relevant revenue generation is to the survivability of the business B . Certainly the first 24 hours will be critical C but it is not the only criteria either. 7. Which of the following application attributes are not relevant when determining the priority order for recovery A. The dependency of the critical applications on the output of this particular application B. The need for critical applications to be recovered in .