Explanation:
The scenario describes a situation where a rapid recovery plan exists, but personnel are unfamiliar with their roles, unaware of the protocol, and struggling to coordinate their efforts. This indicates that while a plan is in place, it was never practiced or tested. Testing the disaster recovery strategy is critical to ensure that all relevant personnel are familiar with the procedures, coordination is streamlined, and any gaps in the execution process are identified and addressed prior to an actual crisis. Therefore, the failure to test the disaster recovery strategy is the most likely vulnerability to blame for this situation.
Ultimate access to all questions.
No comments yet.
Q.4265 Capital Bank just went through a serious system breach that resulted in massive loss of sensitive customer data. The information security department is attempting to restore the system as well as located critical data backups. Unfortunately, it appears no one knows exactly what they are supposed to do. The bank also has a rapid recovery plan in place but the relevant personnel do not know what protocol to follow in the execution process. What’s more, the recovery team is struggling to put in a well-coordinated effort to carry out specific tasks. Which of the following vulnerabilities is most likely to blame for this scenario?
A
Lack of a business impact analysis
B
Failure to back up sensitive data adequately
C
Failure to set up an alternate system
D
Failure to test the disaster recovery strategy