Cert EspressoLearn. Practise. Find your flow.

A LITTLE FOCUS.
A BIG NEXT STEP.

Your pace. Your space.
ISACA · CISM

BIA, continuity, and disaster recovery

CISM · Lesson 17 of 20 · 2:06:45

YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗

In this lesson

Prepare for the ISACA CISM exam, on the 2026 exam content outline. In this lesson: the business impact analysis, recovery objectives like RTO and RPO, the business continuity plan, and the disaster recovery plan. Includes three original practice questions, with Stonebridge Energy, a fictional energy supplier, as the example.

Preview the topics
  • Stonebridge’s billing team says that losing more than fifteen minutes of payment data would be unacceptable. Which objective does this set?
  • Stonebridge’s outage reporting system has a recovery time objective of two hours. Which recovery site fits best?
  • Stonebridge is writing its disaster recovery plan, but no business impact analysis has been done. What should happen first?