During an audit of a business continuity plan (BCP), an IS auditor found that, although all
departments were housed in the same building, each department had a separate BCP. The IS
auditor recommended that the BCPs be reconciled. Which of the following areas should be
Protecting human resources during a disaster-related event should be addressed first. Having
separate BCPs could result in conflicting evacuation plans, thus jeopardizing the safety of staff and
clients. Choices B, C and D may be unique to each department and could be addressed separately,
but still should be reviewed for possible conflicts and/or the possibility of cost reduction, but only
after the issue of human safety has been analyzed.