The GREATEST concern in this scenario is that the risk scenarios used in the DRP have not been tested in two years. Disaster recovery plans must be regularly tested to:
Validate their effectiveness against current threats and operational realities.
Identify gaps or weaknesses in procedures, tools, or response capabilities.
Ensure that personnel are familiar with their roles and responsibilities.
Failing to test risk scenarios regularly may lead to a false sense of preparedness, and the DRP may not work as intended during a real disaster.
In this context, if the DRP does not identify a hot site (Option C), it means there might not be a readily available alternative location to quickly resume operations, which could lead to extended downtime and operational disruption. So yes, the absence of a hot site remains a crucial concern for ensuring the plan’s effectiveness in a disaster scenario.
Not all organizations require a hot site — the type of recovery site depends on business needs and recovery time objectives (RTOs). This isn't automatically a critical gap.
upvoted 1 times
...
...
This section is not available anymore. Please use the main Exam Page.CRISC Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
d9iceguy
1Â month, 3Â weeks agoStaanlee
9Â months, 3Â weeks agod9iceguy
1Â month, 3Â weeks ago