(ISC)2 Certified in Cybersecurity Practice Exam

What is the risk associated with resuming full normal operations too soon after a disaster recovery effort?

1. The danger posed by the disaster might still be present

2. Investors might be upset

3. Regulators might disapprove

4. The organization could save money

The correct answer is: The danger posed by the disaster might still be present

Resuming full normal operations too soon after a disaster recovery effort poses significant risks, primarily because the underlying threats or vulnerabilities that caused the disaster may still be present. This could lead to further disruptions or complications, as systems and processes may not be fully restored or secure. For instance, if a business was impacted by a cyber attack, returning to operations without ensuring that the system is secure could expose the organization to a higher risk of subsequent attacks or system failures. In contrast, while investor dissatisfaction and regulatory disapproval are legitimate concerns, they do not directly address the immediate operational risks associated with the working environment. These factors can influence the organization's long-term stability and reputation but do not inherently alter the risk landscape immediately after a disaster. Similarly, the idea of saving money by hastily reopening operations may seem beneficial in the short term, but it can lead to greater costs in the form of potential future incidents, losses, and recovery efforts if the risks are not managed properly. Thus, the most pressing concern is ensuring that any residual threats are effectively addressed before returning to normal operations to safeguard the organization's assets and operational integrity.