ISC2 CISSP Practice Question

The correct answer is to evaluate the extent of damage to critical systems and infrastructure. Assessment is a crucial phase in disaster recovery that occurs after the initial response to an incident. Before restoration activities can begin, the organization must have a clear understanding of what has been damaged, what remains functional, and what needs to be prioritized for recovery. This evaluation provides the foundation for all subsequent recovery decisions.

The other options represent important activities but are not the best first step in the assessment phase:

• Activating the backup data center is a recovery action that should follow the assessment, not precede it. Without knowing the extent of damage, activating backup facilities might be premature or unnecessary.

• Notifying all employees about the incident timeline is a communication task that occurs after assessment when you have information to share about recovery timelines.

• Reviewing insurance documentation is important but should not delay the technical assessment of systems and infrastructure damage, as time is critical in disaster recovery situations.