Exam CRISC topic 1 question 602 discussion

C. Consult with the business owner to update the BCP: Adjusting the BCP without senior management's oversight may lead to decisions that do not align with organizational priorities or resource capabilities. D. Consult with the IT department to update the RTO: Changing the RTO without considering business requirements and obtaining senior management approval may result in unrealistic recovery objectives or misallocation of resources. Answer is B

D. Consult with the IT department to update the RTO. When a risk practitioner finds a misalignment between the IT department's recovery time objective (RTO) and the enterprise's business continuity plan (BCP), the next step should be to "D. Consult with the IT department to update the RTO." It's important to ensure that the RTO of the key system aligns with the requirements of the BCP and the overall business needs. By consulting with the IT department, you can address the discrepancy and make necessary adjustments to the RTO to ensure it is consistent with the BCP.

should be C

so this is a risk finding, which must be recorded in the RR for a response plan as per the risk owner. I guess informing management comes before consulting with IT. I am going with B.

Agree with the answer B. There is nothing that says either the RTO or the BCP is the correct one. Senior management would need to determine which needs to change.

Agree 'C'.

I thought C, is C MUST be done. Anyhow, it makes sense to report the test results right after, so, before adjusting the BCM plan. This way B should be a correct answer...