An organization’s leadership team gathered managers and key team members in each division to help create a disaster recovery plan. They realize they…

The organization's stated problem is a lack of a "complete understanding of the infrastructure and software." The foundational step to address this gap is to perform a comprehensive inventory of all hardware, software, and data assets. This inventory is a prerequisite for all subsequent disaster recovery (DR) planning activities, such as conducting a business impact analysis (BIA), identifying critical systems, and developing recovery strategies. Without a detailed asset inventory, it is impossible to formulate an accurate or effective DR plan because the scope of what needs to be recovered is unknown.

A. Creating a checklist of tasks is a subsequent planning step that cannot be completed accurately without first knowing which assets need recovery tasks assigned to them.

B. Determining the criteria of a disaster defines the trigger for activating the plan but does not help in identifying the assets that need to be recovered.

C. Identifying key roles establishes the human command structure for a disaster response but does not address the lack of knowledge about the technical infrastructure.

1. National Institute of Standards and Technology (NIST). (2010). Special Publication 800-34 Rev. 1

Contingency Planning Guide for Federal Information Systems.

Section 3.3

"Conduct the Business Impact Analysis (BIA)

" outlines the initial steps of contingency planning. The BIA process requires identifying and prioritizing mission/business processes and the information systems that support them. This cannot be done without a thorough understanding and inventory of the organization's assets. The guide states

"The BIA is the first step in the contingency planning process."

2. Brotby

K.

& Huda

F. (2021). Cloud Security for Dummies. John Wiley & Sons.

Chapter 15

"Ensuring Business Continuity

" emphasizes that a business impact analysis (BIA) is a foundational element. A key input to the BIA is a complete inventory of assets. The text explains that you must first "identify the critical business functions and the assets that support them" before you can determine recovery objectives.

3. Snedaker

S. (2013). Business Continuity and Disaster Recovery Planning for IT Professionals (2nd ed.). Syngress.

Chapter 4

"Phase 1: Project Initiation and Management

" details the initial steps of BCDR planning. It explicitly states that a key task in this phase is to "Identify the people

processes

technologies

facilities

and other resources that support each business process

" which is fundamentally an asset inventory.