Business continuity planning is an involved process of preparation. The focus of this preparation could be to exploit new revenue opportunities, or, in a more limited plan, to simply rebuild in response to a disaster. The organization may be more concerned about protecting a particular line of business or a highly prized customer.
This concludes our chapter on disaster recovery and business continuity for CISA candidates. The subject is far deeper and broader than you will encounter for your CISA exam. Just remember that the next step after a control failure is a business continuity situation. According to the stories in the news, there is plenty of room for improvement.