Exam CISM topic 1 question 381 discussion

A. Identify critical business processes. The first step in developing a business continuity plan (BCP) is to identify critical business processes. This step involves conducting a thorough assessment of your organization's operations to determine which processes are essential for its continued functioning. Once you have identified these critical processes, you can then proceed to determine the business recovery strategy, available resources, and other elements of the BCP.

From CISM Certified Information Security Manager Study Guide by Mike Chappell 1. Project Scope and Planning As with any formalized business process, the development of a resilient business continuity plan requires the use of a proven methodology. Organizations should approach the planning process with several goals in mind: Perform a structured review of the business’s organization from a crisis planning point of view. (A) Create a BCP team with the approval of senior management. Assess the resources available to participate in business continuity activities. (C) Analyse the legal and regulatory landscape that governs an organization’s response to a catastrophic event. (B)

You need FIRST to identify critical business process… so the answer is A. You will find people and team AFTER to know WHAT to do… not before

C is the correct answer . Finding people and Team assembly . Identifying critical business processes/priorities is the second step which is BIA. 1. Project scope and planning 2. Business impact assessment 3. Continuity planning 4. Approval and implementation. 5. Maintenance 6. Testing and exercise

A. Identify critical business processes.