Question $13$

$2$ pts

During a routine audit, a company discovers that its current disaster recovery plan only accounts for system failures but not for potential cyberattacks. The Chief Information Security Officer $($CISO$)$ wants to address this gap. What are the most effective next steps the CISO should take to bolster the company's cybersecurity resilience? $($Select all that apply$)$

Deploy a secondary Internet Service Provider $($ISP$)$ for redundancy

Regularly conduct phishing simulations for employees

Set up a real$-$time monitoring system for critical assets

Incorporate cyberattack scenarios into the disaster recovery plan