Certified Information Security Manager (CISM)Incident ManagementMedium
A CISO is developing a business continuity plan (BCP) for a critical business process that relies heavily on specialized personnel. The CISO recognizes that the sudden unavailability of these key individuals could severely impact the organization's ability to recover. Which of the following actions is MOST effective in mitigating this human factor risk?
- ADeveloping detailed, step-by-step Standard Operating Procedures (SOPs) for all critical tasks.
- BEstablishing a formal succession plan for all senior management and technical experts.
- CPurchasing key-personnel insurance policies for all specialized staff members.
- DImplementing a comprehensive cross-training program for critical roles within the organization.
Show answer & explanationAnswer & explanation
Correct answer: D. Implementing a comprehensive cross-training program for critical roles within the organization.
Cross-training critical roles ensures that multiple individuals possess the necessary skills to perform essential functions, directly mitigating the risk associated with the unavailability of specialized personnel and enhancing the organization's resilience.
Why the other options are wrong
- A. SOPs are important for consistency but do not, by themselves, ensure that another person has the hands-on experience or understanding to execute complex tasks.
- B. Succession plans are for long-term leadership transitions, not rapid response to sudden unavailability of operational personnel.
- C. Insurance provides financial compensation but does not help in the operational recovery of a business process when key personnel are absent.
Cross-training
The process of training employees to perform job functions outside of their primary responsibilities, often related to critical tasks or backup roles.
- Reduces reliance on single individuals for critical tasks.
- Improves organizational resilience and flexibility.
- Enhances employee skill sets and career development.
Memory trick: Don't put all your eggs (skills) in one basket (person).