What Is Most Important When Choosing a Shared Alternate Site?

Disaster Recovery & Business Continuity
Answer Correct answer: B — The organization's risk tolerance must be evaluated first to determine acceptable recovery trade-offs and resource competition risks at a shared site.

Which of the following is MOST important to consider when choosing a shared alternate location for computing facilities?

  1. Incident response team training
  2. The organization's risk tolerance Correct Answer
  3. The organization's mission
  4. Resource availability

Community Votes

D
60%
B
40%

60% of anonymous learners picked answer D. Votes are pick records left by other test-takers — they are not the verified answer.

Community Insight

Tests the governance hierarchy in BC/DR planning, where the common trap is confusing tactical feasibility (resource availability) with the overarching risk management principle (risk tolerance).

Selecting a shared alternate computing facility requires prioritizing organizational risk tolerance over resource availability. ISACA exam consensus and official guidance consistently rank risk appetite as the primary strategic driver for DR site selection.

Candidates frequently select D because shared sites inherently involve pooling infrastructure, but ISACA prioritizes strategic risk alignment over logistical constraints.

Community Discussion (3 comments)

helg420 👍 3 Selected: D
D: remember seeing a qn in the official Q&A similar to this.
bronay 👍 2 Selected: B
B. Risk tolerance
shootnot 👍 1
D- keyword is 'shared alternate location' therefore resources.

Comments & Corrections

No comments yet — spotted an error or have a note? Share it below.

Log in to comment, report an error, or add a note about this question.

Submitted for moderation before publishing. Keep it helpful and respectful.

Expert Analysis

Why the Answer Is Correct

The organization’s risk tolerance is the foundational driver for all disaster recovery and business continuity decisions. When evaluating a shared alternate site, leadership must determine whether the organization can accept the inherent risks of competing for resources during a concurrent outage. Risk tolerance directly shapes acceptable recovery time objectives (RTOs) and recovery point objectives (RPOs), making it the most critical consideration before assessing logistical options.

Why the Other Options Are Wrong

Incident response team training is essential for executing recovery plans but does not dictate site selection criteria. The organization’s mission defines critical processes but is already factored into the Business Impact Analysis; risk tolerance translates those mission needs into actionable recovery strategies. Resource availability is a practical constraint, but ISACA emphasizes that risk appetite must govern whether an organization pursues a shared, reciprocal, or dedicated facility first.

Community Comment Notes

While a majority initially voted for D, experienced candidates and commenters highlight that shared sites introduce conflict-of-interest risks during disasters. Several users noted that this mirrors official ISACA Q&A patterns where risk tolerance consistently outranks logistical factors. The debate underscores the importance of distinguishing between what is operationally possible versus what aligns with executive governance.

Official Reference

Exam Strategy

Always anchor DR and BC questions to governance and risk frameworks first. Before evaluating technical or logistical options, ask which factor dictates the organization’s willingness to accept recovery trade-offs.

Frequently Asked Questions

Why isn't resource availability the top priority for shared sites?

Resource availability is a tactical constraint, but CISM prioritizes risk tolerance as the strategic filter that dictates whether a shared model is acceptable.

How does risk tolerance affect shared site selection?

It determines if leadership accepts the risk of competing demands during concurrent disasters, directly shaping RTO/RPO targets and site architecture choices.

Related Analysis

Practice All CISM Questions

Access 400 questions with complete answers and detailed explanations.

View Full CISM Practice Test →

← Back to CISM Study Guide