When selecting a vendor to provide services associated with a critical application which of the following is the MOST important consideration with respect to business continuity planning (BCP)?
Correct Answer: D
Evaluating whether the vendor's BCP aligns with the enterprise's BCP is the most important consideration when selecting a vendor to provide services associated with a critical application, because it helps to ensure that the vendor can meet the service level agreements (SLAs) and recovery objectives of the enterprise in the event of a disruption or disaster. A BCP is a plan that defines how an organization will continue its critical business processes and functions during and after a crisis1. A vendor's BCP should be compatible and consistent with the enterprise's BCP, and should address the specific risks, impacts, and requirements of the service provision2. Evaluating whether the vendor's BCP aligns with the enterprise's BCP helps to avoid any gaps, conflicts, or issues that could affect the availability, performance, and quality of the service, and to ensure that the vendor can restore the service within an acceptable time frame3. Evaluating whether the vendor's BCP aligns with the enterprise's BCP also helps to comply with the regulatory and contractual obligations, and to protect the reputation and value of the enterprise4. References := Business Continuity Planning (BCP) Definition, Business Continuity Planning for Vendors: What You Need to Know, Vendor Business Continuity Plan: How to Ensure Your Vendors Are Prepared for Disasters, Business Continuity Planning for Vendors: 5 Steps to Success.
Question 137
The risk committee is overwhelmed by the number of false positives included in risk reports. What action would BEST address this situation?
Correct Answer: A
Question 138
Which of the following steps of development of business case describes the financial benefits analysis?
Correct Answer: B
Question 139
Which of the following would be the BEST way to facilitate the adoption of strong IT governance practices throughout a multi-divisional enterprise?
Correct Answer: C
Question 140
The entry points to Service Strategy are referred to as "the Four Ps". They identify the different forms a service strategy may take. Which of the following is a correct list of the 'Four Ps'?