A Chief Information Security Officer (CISO) Has Created a Survey

Multiple Choice

A Chief Information Security Officer (CISO) has created a survey that will be distributed to managers of mission-critical functions across the organization. The survey requires the managers to determine how long their respective units can operate in the event of an extended IT outage before the organization suffers monetary losses from the outage. To which of the following is the survey question related? (Choose two.)

A) Risk avoidance
B) Business impact
C) Risk assessment
D) Recovery point objective
E) Recovery time objective
F) Mean time between failures