nerdexam
(ISC)2

CGRC · Question #674

Management policy and procedures designed to maintain or restore business operations, including computer operations, possibly at an alternate location, in the event of emergencies, system failures…

The correct answer is A. Contingency Plan. A Contingency Plan is a comprehensive set of management policies and procedures designed to maintain or restore an organization's business operations, including IT services, in the event of emergencies, system failures, or disasters. It ensures operational resilience and…

Security and Privacy Governance, Risk Management, and Compliance Program

Question

Management policy and procedures designed to maintain or restore business operations, including computer operations, possibly at an alternate location, in the event of emergencies, system failures, or disaster. Response:

Options

  • AContingency Plan
  • BOperations Plan
  • CDisaster Recovery Plan
  • DIncident Response Plan

How the community answered

(40 responses)
  • A
    93% (37)
  • B
    5% (2)
  • D
    3% (1)

Why each option

A Contingency Plan is a comprehensive set of management policies and procedures designed to maintain or restore an organization's business operations, including IT services, in the event of emergencies, system failures, or disasters. It ensures operational resilience and business continuity.

AContingency PlanCorrect

A Contingency Plan is a broad management document that defines the policies and procedures to ensure the continuity or restoration of business operations, including computer and network operations, possibly at an alternate location, following any disruptive event like emergencies, system failures, or disasters. It encompasses various strategies to mitigate the impact of such events and maintain essential functions.

BOperations Plan

An Operations Plan details routine daily activities and procedures for normal functioning, not for emergency or disaster recovery.

CDisaster Recovery Plan

A Disaster Recovery Plan (DRP) is a specific component of a broader contingency plan, focusing primarily on restoring IT systems and infrastructure after a disaster, rather than the entire business operation.

DIncident Response Plan

An Incident Response Plan outlines steps for detecting, analyzing, containing, eradicating, and recovering from specific security incidents, not general business operations restoration during wide-scale disruptions.

Concept tested: Business continuity and disaster recovery planning

Source: https://csrc.nist.gov/glossary/term/contingency-plan

Topics

#Contingency Planning#Business Continuity#Disaster Recovery#Risk Management

Community Discussion

No community discussion yet for this question.

Full CGRC Practice