Which of the following questions is less likely to help in assessing an organization's contingency planning controls?
Click on the arrows to vote for the correct answer
A. B. C. D.A.
Contingency planning involves more than planning for a move offsite after a disaster destroys a facility.
It also addresses how to keep an organization's critical functions operating in the event of disruptions, large and small.
Handling of damaged media is an operational task related to regular production and is not specific to contingency planning.
Source: SWANSON, Marianne, NIST Special Publication 800-26, Security Self-Assessment Guide for Information Technology Systems, November 2001 (Pages A-27 to A-28).
All the given options are related to assessing an organization's contingency planning controls. However, option A, "Is damaged media stored and/or destroyed?" is less likely to help in assessing an organization's contingency planning controls.
Contingency planning refers to the process of developing a plan to maintain or restore business operations in the event of a disruption or disaster. It involves identifying potential risks and developing strategies to minimize the impact of those risks on the organization's ability to operate.
Option B, "Are the backup storage site and alternate site geographically far enough from the primary site?" is an important question because in the event of a disaster, it is important to have backups stored in a separate location to ensure that the organization can quickly recover critical data and resume operations.
Option C, "Is there an up-to-date copy of the plan stored securely off-site?" is also a critical question because the contingency plan is useless if it is not accessible during an actual disaster. Having an up-to-date copy stored securely off-site ensures that the plan can be accessed when needed.
Option D, "Is the location of stored backups identified?" is also an important question because it ensures that the organization can quickly locate and retrieve backups in the event of a disaster.
In contrast, option A, "Is damaged media stored and/or destroyed?" is less likely to help in assessing an organization's contingency planning controls. While it is important to properly dispose of damaged media, it is not directly related to contingency planning.
Therefore, options B, C, and D are more likely to help in assessing an organization's contingency planning controls compared to option A.