Question
Company A is merging with Company B. Company A is a small, local company. Company B has a large, global presence. The two companies have a lot of duplication in their IT systems, processes, and procedures. On the new Chief Information Officer's (CIO's) first day, a fire breaks out at Company B's main data center. Which of the following actions should the CIO take first?
- A. Determine whether the incident response plan has been tested at both companies, and use it to respond.
- B. Review the incident response plans, and engage the disaster recovery plan while relying on the IT leaders from both companies. Correct
- C. Ensure hot, warm, and mobile disaster recovery sites are available, and give an update to the companies' leadership teams.
- D. Initiate Company A's IT systems processes and procedures, assess the damage, and perform a BIA.
Explanation
A fire that takes out a main data center is a disaster, so the CIO should invoke the existing plans immediately and lean on the IT leaders who know each company's environment. Checking whether plans were tested (A) wastes time during an active event. Option C assumes recovery sites of every type exist rather than acting on the plan, and option D imposes the smaller company's processes on the larger company's systems and starts a BIA, which should have been done before a disaster.
