CERTIFIED-IN-CYBERSECURITY Question #406: Real Exam Question with Answer & Explanation

Question

Which of the following is NOT a common component of a comprehensive Business Continuity Plan (BCP)?

Options

• AImmediate response procedures and checklists
• BContact numbers for critical members of the supply chain
• CEmployee well-being programs
• DMultiple contact methods and a list of backup members

Explanation

While important for the organization's health and productivity, employee well-being programs are not commonly included as essential components of a Business Continuity Plan (BCP). A BCP typically focuses on the continuation of business operations in the face of disruptions and may not directly address programs for employee wellness. (see ISC2 Study Guide Chapter 2, Module 2). For example, a manufacturing company's BCP might include immediate response procedures for various scenarios such as natural disasters, cyber attacks, or supply chain disruptions. It would also include contact information for backup team members and critical supply chain partners to ensure business continuity. The "how/why" to enact the plan is generally covered within the immediate response procedures and does not need to be a separate component. The plan's purpose and activation criteria are usually outlined in the introduction or overview of the plan, not as a separate section. As for the remaining options, "Multiple contact methods and a list of backup members" and "Contact numbers for critical members of the supply chain" are essential for ensuring the right people can be reached quickly in a crisis. Finally, "Immediate response procedures and checklists" provides a step-by-step guide on what to do in the event of a disruption, to ensure a quick and effective response.

No community discussion yet for this question.