When an organization experiences a disruptive event, the business continuity plan (BCP) should be triggered...

[References: The CISM Review Manual 2023 defines RTO as “the maximum acceptable time that a service can be unavailable or disrupted before it causes unacceptable consequences” and states that “the RTO is determined based on the impact of service interruption on the enterprise’s business processes, reputation, customers, and stakeholders” (p. 189). The CISM Review Questions, Answers & Explanations Manual 2023 also provides the following rationale for this answer: “Expected duration of outage is the correct answer because it is the primary factor that should trigger the BCP, as it reflects the maximum time that the organization can afford to lose its critical business processes and functions without causing unacceptable consequences” (p. 96). Additionally, the article Invoking your business continuity plan: five triggers, six decision points from the ITWeb website states that “the expected duration of outage is the most important consideration when deciding to invoke the BCP, as it indicates how long the organization can sustain the disruption before it impacts its business objectives, operations, reputation, and legal obligations” (p. 2), , , , , , , ]