nerdexam
(ISC)2

CGRC · Question #199

The documentation of a predetermined set of instructions or procedures that describe how an organization's mission/business functions will be sustained during and after a significant disruption…

The correct answer is A. Business Continuity Plan (BCP). This describes a Business Continuity Plan (BCP), which outlines procedures to sustain critical business functions during and after a disruptive event.

Security and Privacy Governance, Risk Management, and Compliance Program

Question

The documentation of a predetermined set of instructions or procedures that describe how an organization's mission/business functions will be sustained during and after a significant disruption. Response:

Options

  • ABusiness Continuity Plan (BCP)
  • BBusiness Recovery/Disruption Plan (BRP)
  • CCommon Vulnerability and Exposures (CVE)
  • DBusiness Impact Analysis (BIA)

How the community answered

(67 responses)
  • A
    87% (58)
  • B
    4% (3)
  • C
    1% (1)
  • D
    7% (5)

Why each option

This describes a Business Continuity Plan (BCP), which outlines procedures to sustain critical business functions during and after a disruptive event.

ABusiness Continuity Plan (BCP)Correct

A Business Continuity Plan (BCP) is a comprehensive document that specifies the procedures and instructions an organization must follow to ensure the continuation of its critical business functions during and after a significant disruption. It encompasses strategies for maintaining operations, recovering data, and ensuring the availability of essential services, typically covering a broader scope than just IT recovery.

BBusiness Recovery/Disruption Plan (BRP)

Business Recovery/Disruption Plan (BRP) is not a universally recognized standard term; while "disaster recovery plan" (DRP) is common, BCP is the overarching concept for sustaining functions.

CCommon Vulnerability and Exposures (CVE)

Common Vulnerability and Exposures (CVE) is a list of publicly disclosed cybersecurity vulnerabilities, not a plan for business function sustainment.

DBusiness Impact Analysis (BIA)

Business Impact Analysis (BIA) is a process that identifies and evaluates the potential effects of business disruptions, which is a component of BCP development, not the plan itself.

Concept tested: Business Continuity Plan (BCP) definition

Source: https://csrc.nist.gov/glossary/term/business_continuity_plan

Topics

#Business Continuity Plan#Disaster Recovery#Organizational Resilience

Community Discussion

No community discussion yet for this question.

Full CGRC Practice