nerdexam
(ISC)2

CGRC · Question #169

Which of the following recovery plans includes a monitoring process and triggers for initiating planned actions? Response:

The correct answer is A. Contingency plan. A contingency plan is a comprehensive recovery strategy that includes monitoring processes and predefined triggers to initiate specific actions when an unexpected event impacts system availability or operations. It outlines steps to restore normal operations for an information…

Security and Privacy Governance, Risk Management, and Compliance Program

Question

Which of the following recovery plans includes a monitoring process and triggers for initiating planned actions? Response:

Options

  • AContingency plan
  • BBusiness continuity plan
  • CDisaster recovery plan
  • DContinuity of Operations Plan

How the community answered

(34 responses)
  • A
    88% (30)
  • B
    3% (1)
  • C
    6% (2)
  • D
    3% (1)

Why each option

A contingency plan is a comprehensive recovery strategy that includes monitoring processes and predefined triggers to initiate specific actions when an unexpected event impacts system availability or operations. It outlines steps to restore normal operations for an information system.

AContingency planCorrect

A Contingency Plan is designed to restore an information system to its desired state after a disruption and specifically includes provisions for ongoing monitoring and defined triggers that initiate the planned recovery actions. This plan details the steps to be taken when an incident occurs, ensuring that personnel know exactly when and how to respond based on specific conditions or events. It is often system-specific.

BBusiness continuity plan

A Business Continuity Plan (BCP) focuses on maintaining critical business functions during and after a disruption, which is broader than a system-specific recovery plan, and while it includes triggers, the contingency plan is more specifically tied to system recovery processes and monitoring.

CDisaster recovery plan

A Disaster Recovery Plan (DRP) focuses on recovering IT infrastructure and services after a major disaster, which is a subset of a BCP and typically initiated by specific disaster events rather than continuous monitoring and nuanced triggers for general system disruptions.

DContinuity of Operations Plan

A Continuity of Operations Plan (COOP) focuses on maintaining an organization's essential functions during a disruption, similar to a BCP but often with a focus on government operations, and encompasses broader organizational resilience rather than detailed system-level monitoring and triggers.

Concept tested: Recovery plans - Contingency Plan

Source: https://csrc.nist.gov/glossary/term/contingency_plan

Topics

#Contingency planning#Recovery plans#Plan activation#Monitoring

Community Discussion

No community discussion yet for this question.

Full CGRC Practice