SSCP Systems Security Certified PractitionerIncident Response and RecoveryMedium
An organization is updating its disaster recovery plan. The plan currently focuses on restoring IT systems. A consultant advises that the plan needs to be expanded to address the broader continuity of business operations, including non-IT functions, personnel, and critical processes. What type of plan is the consultant suggesting the organization develop or incorporate?
- ABusiness Continuity Plan (BCP)
- BContinuity of Operations Plan (COOP)
- CCrisis Management Plan (CMP)
- DIncident Response Plan (IRP)
Show answer & explanationAnswer & explanation
Correct answer: A. Business Continuity Plan (BCP)
A Business Continuity Plan (BCP) is a comprehensive plan that addresses how an organization will maintain critical business functions and operations during and after a disaster, encompassing IT, personnel, and processes.
Why the other options are wrong
- B. A COOP is similar to a BCP but is typically used in government contexts, while BCP is the more general term for private sector organizations.
- C. A CMP focuses on managing the overall organizational response and communication during a crisis, often a component of a BCP, but not the overarching plan for operational continuity.
- D. An IRP focuses on immediate response to security incidents, not broad business operations.
Business Continuity Plan (BCP)
A comprehensive plan that outlines how an organization will continue to operate its critical business functions and processes during and after a disruptive event.
- Broader than a DRP, includes non-IT aspects.
- Focuses on people, processes, and technology.
- Aims to maintain operations, not just restore IT.
Memory trick: BCP keeps the whole business running, DRP just fixes the tech.