Certified Information Security Manager (CISM)Incident ManagementHard

During a disaster recovery exercise, an organization successfully restores its core financial systems at a warm site. However, the CISO observes that the critical personnel required to operate these systems are not familiar with the specific configurations and procedures of the warm site, leading to significant delays. Which of the following is the MOST effective way to prevent this human-factor related delay in a real disaster?

  1. ADevelop comprehensive, step-by-step documentation for all recovery procedures.
  2. BIncrease the budget for more robust automated recovery tools.
  3. CSwitch to a hot site strategy to minimize manual intervention during recovery.
  4. DImplement regular cross-training and rotation of personnel to familiarize them with DR roles and environments.
Show answer & explanation

Correct answer: D. Implement regular cross-training and rotation of personnel to familiarize them with DR roles and environments.

The problem stems from personnel unfamiliarity. While documentation is helpful, hands-on experience is crucial for efficiency during a high-stress disaster. Regular cross-training and rotation provide the necessary practical experience and familiarity with the DR environment and procedures, directly addressing the human factor delay.

Why the other options are wrong

  • A. Documentation is essential but often insufficient on its own; practical familiarity is needed to execute complex procedures efficiently under pressure.
  • B. Automation reduces manual steps but doesn't address the human factor for tasks that still require intervention or oversight.
  • C. A hot site reduces recovery time, but if personnel are still unfamiliar with its specific operations, delays can still occur, especially for complex systems.

DR Human Factor Mitigation

Strategies to ensure that personnel involved in disaster recovery are adequately trained, familiar, and prepared to execute recovery procedures efficiently under stressful conditions.

  • Addresses skill gaps and lack of experience.
  • Crucial for effective and timely recovery.
  • Goes beyond documentation to practical readiness.

Memory trick: DR humans need 'T.R.A.I.N.': Training, Regular exercises, Awareness, Information sharing, and New role familiarization.

More Incident Management questions