IT に関する IIA のガイダンスによると、重要なデータを将来のある時点で確実に復元できるようにするためのデータ バックアップ計画が存在するが、復旧および復元プロセスが定義されていない状況を最もよく表しているのは次のうちどれですか?
正解:D
A disaster recovery plan (DRP) ensures that critical systems and data can be restored after an incident. If backup plans exist but no recovery and restore processes are defined, then the organization lacks a functional recovery plan altogether.
* (A) Hot recovery plan.
* Incorrect. A hot recovery plan includes real-time data replication and immediate failover systems, allowing for almost instant recovery in case of an outage. Since the scenario mentions that no restore process is defined, this cannot be a hot recovery plan.
* (B) Warm recovery plan.
* Incorrect. A warm recovery plan involves regular backups and a standby system that can be activated within hours or days. However, without defined restore procedures, the organization does not even have a warm recovery plan.
* (C) Cold recovery plan.
* Incorrect. A cold recovery plan means that backups exist but recovery takes significant time because systems and infrastructure need to be rebuilt. However, a cold plan still includes a recovery process, which the scenario lacks.
* (D) Absence of recovery plan. #
* Correct. If data backup plans exist but no restore processes are defined, then there is no functional recovery plan. Without a structured approach to data recovery, backups alone are useless in an actual disaster scenario.
* IIA GTAG "Business Continuity and Disaster Recovery" highlights the need for detailed recovery processes as part of an overall disaster recovery plan.
* IIA GTAG - "Business Continuity and Disaster Recovery"
* IIA Standard 2120 - Risk Management
* COBIT Framework - IT Disaster Recovery Controls
Analysis of Answer Choices:IIA References:Thus, the correct answer is D, as data backups without recovery procedures indicate the absence of a recovery plan.