A Chief Information Security Officer (CISO) is developing a new BIA for the organization. The CISO wants to gather requirements to determine the appropriate RTO and RPO for the organization's ERP. Which of the following should the CISO interview as MOST qualified to provide RTO/RPO metrics?
A) Data custodian
B) Data owner
C) Security analyst
D) Business unit director
E) Chief Executive Officer (CEO)

Question

Quizplus · Accepted Answer

The Business Unit Director is most qualified to provide RTO/RPO metrics as they have a comprehensive understanding of the business processes and the impact of downtime on operations, which is crucial for determining recovery objectives.

A Chief Information Security Officer (CISO) Is Developing a New