Exam CISA topic 1 question 960 discussion

A. Updated based on changes to personnel and environments. The organization's business continuity plan (BCP) should be a dynamic document that reflects the changing needs and circumstances of the organization. Regular updates to the BCP based on changes to personnel, technology, and the environment can help ensure that it remains relevant and effective. Testing the BCP whenever new applications are implemented (B) or after an intrusion attempt (D) can also be important, but it is not enough to rely on these events alone for updating the BCP. Updating the BCP before an independent audit review (C) may be part of the audit preparation process, but it is important to keep the BCP up-to-date on a regular basis, regardless of whether an audit is imminent.

A. updated based on changes to personnel and environments A business continuity plan (BCP) should be regularly updated to reflect changes in personnel, environments, technologies, and other factors that could affect an organization's ability to continue its operations in the face of disruptions. This helps ensure that the plan remains relevant and effective over time. Option A is the most appropriate choice in this context. While the other options may also be important aspects of a BCP, they do not address the need for regular updates based on changing circumstances.

answer is A

I think A can be correct

I would go for A here