An organization is preparing to develop a business continuity plan. The organization is required to meet regulatory requirements relating to confidentiality and availability, which are well-defined. Management has expressed concern following initial meetings that the organization is not fully aware of the requirements associated with the regulations. Which of the following would be MOST appropriate for the project manager to solicit additional resources for during this phase of the project?
A) After-action reports
B) Gap assessment
C) Security requirements traceability matrix
D) Business impact assessment
E) Risk analysis

Question

Quizplus · Accepted Answer

A gap assessment would help identify the differences between the current state and the regulatory requirements, ensuring that the organization understands and can address any deficiencies in meeting confidentiality and availability standards.

An Organization Is Preparing to Develop a Business Continuity Plan