Free ISACA CISA Actual Exam Questions - Question 7 Discussion

Question No. 7
An organization outsourced its IS functions to meet its responsibility for disaster recovery,
the organization should:
Select one option, then reveal solution.
US
KN
Karan N.
2026-02-04

It’s B because outsourcing doesn’t mean the organization loses control; they still must work with the vendor to ensure disaster recovery efforts are aligned and effective, not just rely on internal audit or a third party.

0
IY
Irfan Y.
2026-01-22

B/D? I agree B makes sense because the organization can’t just outsource and ignore DRP. But D could also fit since internal audit might need to check if the vendor’s disaster recovery measures meet company standards. Still, coordination with the vendor seems more immediate and essential.

0
MZ
Michael Z.
2026-01-21

B imo, because even with outsourcing, the org still needs to coordinate closely to ensure the vendor’s plans align with their own recovery goals. They can’t just hand it off and forget about it.

0
MZ
Michael Z.
2026-01-15

B

0