Exam CISA topic 1 question 1036 discussion

Cyber resiliency emphasizes the ability of an organization to bounce back from cyber incidents, ensuring that operations can resume quickly and with minimal disruption (option A). This objective is crucial because it acknowledges the inevitability of cyber attacks and focuses on minimizing their impact rather than solely preventing them. Therefore, option A best describes the primary goal of cyber resiliency.

B. To prevent potential attacks or disruptions in operations: This is another crucial aspect, but it's just one part of the broader goal of managing the impact of breaches. Cyber resiliency encompasses not just prevention, but also the ability to withstand and adapt to attacks that do happen.

The PRIMARY objective of cyber resiliency is to limit the severity of security breaches and maintain continuous operations. Cyber resiliency involves not only recovering from incidents but also proactively planning and implementing measures to prevent, detect, respond to, and recover from cyber threats. It focuses on the organization's ability to adapt to and recover from adverse cyber events while maintaining essential functions and minimizing the impact on operations.

Why not A?

C: the key is "maintain continuous operations."

c is answer

C. To limit the severity of security breaches and maintain continuous operations

efinition(s): The ability to anticipate, withstand, recover from, and adapt to adverse conditions, stresses, attacks, or compromises on systems that use or are enabled by cyber resources.