Exam CISA topic 1 question 1139 discussion

The most cost-effective way to determine the effectiveness of a business continuity plan (BCP) is a tabletop exercise. In a tabletop exercise, participants discuss and simulate various disaster scenarios in a non-disruptive and controlled environment. It involves key stakeholders going through the plan, identifying strengths and weaknesses, and discussing how they would respond to specific events. Tabletop exercises are generally less resource-intensive and less disruptive than full operational tests or stress tests. They provide an opportunity to validate and improve the plan without the need for extensive downtime or resource allocation. This makes them a cost-effective method for assessing the BCP's effectiveness.