nerdexam
(ISC)2

CERTIFIED-IN-CYBERSECURITY · Question #699

Which of the following is NOT a component of a business continuity plan?

The correct answer is B. Cybersecurity risk assessment. A Business Continuity Plan (BCP) focuses on keeping an organization operational during and after a disruption. It includes crisis communication plans (A), emergency response procedures (C), and IT infrastructure documentation (D) to support recovery efforts. A cybersecurity…

Business Continuity (BC), Disaster Recovery (DR) & Incident Response (IR) Concepts

Question

Which of the following is NOT a component of a business continuity plan?

Options

  • ACrisis communication plan
  • BCybersecurity risk assessment
  • CEmergency response procedures
  • DIT infrastructure documentation

How the community answered

(57 responses)
  • A
    5% (3)
  • B
    91% (52)
  • C
    2% (1)
  • D
    2% (1)

Explanation

A Business Continuity Plan (BCP) focuses on keeping an organization operational during and after a disruption. It includes crisis communication plans (A), emergency response procedures (C), and IT infrastructure documentation (D) to support recovery efforts. A cybersecurity risk assessment (B) is a separate security management activity used to identify and evaluate threats - it informs security planning but is not itself a component of a BCP.

Topics

#Business Continuity Plan#Disaster Recovery#Risk Management#Incident Response

Community Discussion

No community discussion yet for this question.

Full CERTIFIED-IN-CYBERSECURITY Practice