CGRC · Question #623
Which of the following recovery plans includes specific strategies and actions to deal with specific variances to assumptions resulting in a particular security problem, emergency, or state of affairs
The correct answer is D. Contingency plan. A contingency plan outlines specific strategies and actions to deal with particular security problems or emergencies, addressing variances from expected assumptions. It details steps for restoring system operations following a disruption.
Question
Which of the following recovery plans includes specific strategies and actions to deal with specific variances to assumptions resulting in a particular security problem, emergency, or state of affairs? Response:
Options
- ABusiness continuity plan
- BContinuity of Operations Plan
- CDisaster recovery plan
- DContingency plan
How the community answered
(45 responses)- A2% (1)
- B2% (1)
- C7% (3)
- D89% (40)
Why each option
A contingency plan outlines specific strategies and actions to deal with particular security problems or emergencies, addressing variances from expected assumptions. It details steps for restoring system operations following a disruption.
A Business Continuity Plan (BCP) focuses on maintaining critical business functions during and after a disruption, encompassing organizational-level resilience rather than specific technical variances.
A Continuity of Operations Plan (COOP) is a government-specific term for a BCP, aiming to ensure essential governmental functions continue during a disruption, which is broader than specific security problem variances.
A Disaster Recovery Plan (DRP) specifically addresses the recovery of IT systems and infrastructure after a major disaster, representing a component of a contingency plan but not as broadly focused on specific variances or general security problems.
A contingency plan (CP) is designed to provide specific strategies and actions for responding to identified security problems, emergencies, or unforeseen operational states. It details the precise steps needed to restore essential services and functions, directly addressing 'variances to assumptions resulting in a particular security problem, emergency, or state of affairs'.
Concept tested: Types of recovery plans
Source: https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-34r1.pdf
Topics
Community Discussion
No community discussion yet for this question.