iSACA Cybersecurity Fundamentals Certification Practice Exam

Which of the following best describes a disaster in the context of organizational operations?

1. A natural occurrence affecting physical assets

2. A disruption that makes critical information resources inoperative

3. An event that improves operational efficiency

4. A scheduled maintenance activity

The correct answer is: A disruption that makes critical information resources inoperative

A disaster, in the context of organizational operations, is best described as a disruption that renders critical information resources inoperative. This definition highlights the impact a disaster has on the functioning and continuity of an organization. Disasters can come in many forms—natural disasters, cyberattacks, or equipment failures—each leading to significant interruptions that challenge the organization's ability to operate effectively. The focus on critical information resources emphasizes that disasters not only affect the physical aspects of an organization but also have severe implications for data availability, integrity, and security. When these resources are compromised or unavailable, the organization may struggle to maintain essential operations, fulfill customer obligations, or protect sensitive information. Understanding this definition is crucial for effective disaster recovery and business continuity planning, ensuring that organizations are prepared to restore functionality after such an event.