ISC2 Certified in Cybersecurity (CC)Business Continuity (BC), Disaster Recovery (DR) & Incident Response (IR) ConceptsHard
A multinational corporation is developing its business continuity strategy. They need a comprehensive plan that outlines how to maintain critical business functions during and after a disruption, focusing on the continuity of operations rather than solely IT recovery. This describes which type of plan?
- AIncident Response Plan (IRP)
- BBusiness Continuity Plan (BCP)
- CCrisis Management Plan (CMP)
- DDisaster Recovery Plan (DRP)
Show answer & explanationAnswer & explanation
Correct answer: B. Business Continuity Plan (BCP)
A Business Continuity Plan (BCP) is a holistic plan that addresses how an organization will continue to operate its critical business functions during and after a disruption. It encompasses not just IT recovery but also personnel, facilities, and processes to ensure ongoing business operations.
Why the other options are wrong
- A. IRP focuses on responding to specific security incidents, not the broader continuity of business operations.
- C. CMP typically deals with managing the overall organizational response and communication during a crisis, often a part of a BCP but not the full scope of operational continuity.
- D. DRP is a component of BCP, specifically focusing on the recovery of IT infrastructure and systems.
Business Continuity Plan (BCP)
A comprehensive plan that outlines how an organization will maintain critical business functions and operations during and after a disruptive event, ensuring resilience and recovery.
- Broader than a Disaster Recovery Plan, encompassing all aspects of business operations.
- Focuses on maintaining essential functions, not just IT systems.
- Addresses people, processes, technology, and facilities.
Memory trick: BCP: The 'Big Picture' plan for keeping the Business going.