What is a secondary objective of a business continuity and disaster recovery plan?

Prepare for the CISA Domain 4 Exam with tailored quizzes. Enhance your auditing skills with detailed explanations and practice multiple-choice questions for cybersecurity professionals. Optimize your study time and ensure success!

The correct response identifies safeguarding critical information system (IS) assets as a secondary objective of a business continuity and disaster recovery plan. While the primary focus of such plans is often on ensuring that operations can continue and minimizing losses, it is also essential to protect the vital information systems that support those operations.

In the context of business continuity, safeguarding critical IS assets involves making sure that the technology and data that an organization relies on are secure, recoverable, and able to support business functions after a disruption. This could include implementing measures like regular backups, redundancy, and security protocols that ensure that key information systems can be restored or maintained during and after disasters.

The other options address primary aspects of business continuity and recovery. Providing for continuity of operations directly addresses the operational aspect; minimizing loss impacts the overall financial health of the organization, and protecting human life focuses on the safety of personnel involved. Each of these is crucial in its own right, but safeguarding IS assets serves as a supporting objective that enables these primary goals to be achieved effectively.

Subscribe

Get the latest from Examzify

You can unsubscribe at any time. Read our privacy policy