Certbie
Question 1 of 30
During an integrated audit of a financial services firm, a significant disruption occurred at the primary data center, leading to a prolonged outage of core trading platforms. The business continuity plan (BCP) was activated, and a secondary site was brought online. As an integrated lead auditor, what is the most critical aspect to evaluate regarding the effectiveness of the BCP in this context, considering the interplay with the ISMS?
The extent to which the BCP's recovery strategies and procedures demonstrably incorporated and maintained the information security controls mandated by the ISMS during the recovery process, and whether the RTOs/RPOs were met while adhering to security policies.
The thoroughness of the BCP's documentation, including the clarity of roles and responsibilities, and the availability of contact lists for key personnel involved in the recovery effort.
The frequency and scope of the BCP's testing and exercising, focusing on whether all potential threat scenarios identified in the ISMS risk assessment were simulated.
The financial investment made by the organization in redundant infrastructure and backup systems, as this directly correlates with the ability to recover operations quickly.

Preparing for ISO 27001/22301 - Integrated Security & Business Continuity Lead Auditor? Now land the interview.

73% of qualified candidates get rejected because of weak resumes. Build an ATS-optimized, recruiter-ready resume in under 5 minutes - free to start.

Build My Resume Free