The Importance of Criticality Surveys

A.

The Criticality Survey is implemented through a standard questionnaire to gather input from the most knowledgeable people.

Not all personnel that is going to be part of recovery teams is necessarily able to help in identifying critical functions of the organization.

The intent of such a survey is to identify the services and systems that are critical to the organization.

Having a clearly stated purpose for the survey helps in avoiding misinterpretations.

Management's approval of the survey should be obtained before distributing it.

Source: HARE, Chris, CISSP Study Guide: Business Continuity Planning Domain,

A Criticality Survey is a tool used by organizations to identify their most critical assets, services, and systems. It is an important step in the development of a Business Continuity Plan (BCP) or Disaster Recovery Plan (DRP). A criticality survey can help organizations identify the priority of services and systems, which can assist in determining how resources should be allocated in the event of a disaster or interruption.

Now, let's review each statement and determine which one is incorrect:

A. It is implemented to gather input from all personnel that is going to be part of the recovery teams. This statement is correct. It is important to gather input from all personnel involved in the recovery process, including IT staff, business units, and other stakeholders. By involving all parties, the organization can identify potential issues and ensure that everyone is on the same page.

B. The purpose of the survey must be clearly stated. This statement is correct. The purpose of the survey should be clearly stated to ensure that everyone understands the goals of the survey and provides accurate responses.

C. Management's approval should be obtained before distributing the survey. This statement is correct. Management approval is required before distributing the survey to ensure that the survey aligns with the organization's goals and objectives.

D. Its intent is to find out what services and systems are critical to keeping the organization in business. This statement is also correct. The intent of the survey is to identify critical services and systems that are essential to the organization's continued operation in the event of a disaster or interruption.

Therefore, all the statements are correct, and none of them is incorrect.