Exam CISM topic 1 question 814 discussion

I like C. How can you transfer Risk (Answer A) to 3rd party, this is organization business not 3rd party's ones. You can transfer in case of insurance at a possible high cost even if low probability

This should be C

I cant see why people choose A. Your organization is doing the business - if an incident happens - who will feel the impact the most? It not the vendor providing DRaaS - it wil lbe your own organization. To me the most logical answer is C. Maintaining a disaster recovery site (e.g., a hot site) is quite expensive to maintain. Therefore, C makes sense.

Answer: D. C is included in D, and IMO you outsourcing the risk is not possible in a DRaaS.

it's C, it wont transfer the risk to third party, it's a SaaS, the organization still need to take responsibility for their data.

How can it be Risk transfer? Is moving On Premises MS office to Office 365 considered risk transfer? Are IaaS, Paas, and SaaS considered risk transfer? I do not think so.

Should be C. You won't be able to transfer the risk to third party (A). The risk still remains with the organisation.

The answer is C. The BEST reason is eliminating the need to maintain offsite facilities. Yes D is a good answer, but C goes into why it will eliminate cost.

It's C, but D should include C... Not 100%, but going with D.

I like D:DRaaS offers several benefits for your infrastructure security, such as cost savings, reliability, and flexibility. Cost savings are achieved by eliminating the need to invest in and maintain expensive hardware, software, and physical space for backup and recovery.

It is C. agreed

C. It eliminates the need to maintain offsite facilities.

The best reason for an organization to use Disaster Recovery as a Service (DRaaS) is A. It transfers the risk associated with recovery to a third party. DRaaS can provide a reliable and cost-effective way to ensure business continuity in the event of a disaster, by transferring the risk associated with recovery to a third-party provider.

DRaaS requirements and expectations are documented in a service-level agreement (SLA), and the third-party vendor provides failover to a computing environment, either through a contract or on a pay-per-use basis. This would reduce the cost of having a second site

A. It transfers the risk associated with recovery to a third party.

A. It transfers the risk associated with recovery to a third party.

Saves the hassle of maintenance’s