nerdexam
(ISC)2

CGRC · Question #623

Which of the following recovery plans includes specific strategies and actions to deal with specific variances to assumptions resulting in a particular security problem, emergency, or state of affairs

The correct answer is D. Contingency plan. A contingency plan outlines specific strategies and actions to deal with particular security problems or emergencies, addressing variances from expected assumptions. It details steps for restoring system operations following a disruption.

Security and Privacy Governance, Risk Management, and Compliance Program

Question

Which of the following recovery plans includes specific strategies and actions to deal with specific variances to assumptions resulting in a particular security problem, emergency, or state of affairs? Response:

Options

  • ABusiness continuity plan
  • BContinuity of Operations Plan
  • CDisaster recovery plan
  • DContingency plan

How the community answered

(45 responses)
  • A
    2% (1)
  • B
    2% (1)
  • C
    7% (3)
  • D
    89% (40)

Why each option

A contingency plan outlines specific strategies and actions to deal with particular security problems or emergencies, addressing variances from expected assumptions. It details steps for restoring system operations following a disruption.

ABusiness continuity plan

A Business Continuity Plan (BCP) focuses on maintaining critical business functions during and after a disruption, encompassing organizational-level resilience rather than specific technical variances.

BContinuity of Operations Plan

A Continuity of Operations Plan (COOP) is a government-specific term for a BCP, aiming to ensure essential governmental functions continue during a disruption, which is broader than specific security problem variances.

CDisaster recovery plan

A Disaster Recovery Plan (DRP) specifically addresses the recovery of IT systems and infrastructure after a major disaster, representing a component of a contingency plan but not as broadly focused on specific variances or general security problems.

DContingency planCorrect

A contingency plan (CP) is designed to provide specific strategies and actions for responding to identified security problems, emergencies, or unforeseen operational states. It details the precise steps needed to restore essential services and functions, directly addressing 'variances to assumptions resulting in a particular security problem, emergency, or state of affairs'.

Concept tested: Types of recovery plans

Source: https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-34r1.pdf

Topics

#Contingency planning#Recovery plans#Incident management

Community Discussion

No community discussion yet for this question.

Full CGRC Practice