Which of the following is MOST important for IT governance to have in place to ensure the enterprise can maintain operations during extensive system downtime?

Fault-tolerant hardware helps prevent downtime for specific components but doesn't address broader operational continuity or recovery from major system outages.

An incident response plan focuses on containing and resolving specific security incidents or technical failures but doesn't provide the overarching strategy for maintaining business functions during prolonged disruptions.

A crisis communications plan is a component of a broader BCP or disaster recovery plan, focusing specifically on managing internal and external communications during a crisis, but it does not ensure operational continuity by itself.

A Business Continuity Plan (BCP) is the most comprehensive solution to ensure an enterprise can maintain operations during extensive system downtime because it encompasses the entire organization's ability to continue critical functions. The BCP identifies essential business processes, defines recovery strategies for all necessary resources (including IT and non-IT), and establishes procedures to minimize the impact of disruptions and restore normal operations.