During testing, a risk practitioner finds the IT department's recovery time objective (RTO) for a key system does not align with the enterprise's business continuity plan (BCP). Which of the following should be done NEXT?
A. Complete a risk exception form
B. Report the gap to senior management
C. Consult with the business owner to update the BCP
D. Consult with the IT department to update the RTO
During testing, a risk practitioner finds the IT department's recovery time objective (RTO) for a key system does not al
-
answerhappygod
- Site Admin
- Posts: 899604
- Joined: Mon Aug 02, 2021 8:13 am
During testing, a risk practitioner finds the IT department's recovery time objective (RTO) for a key system does not al
Join a community of subject matter experts. Register for FREE to view solutions, replies, and use search function. Request answer by replying!