CGRC · Question #674
Management policy and procedures designed to maintain or restore business operations, including computer operations, possibly at an alternate location, in the event of emergencies, system failures…
The correct answer is A. Contingency Plan. A Contingency Plan is a comprehensive set of management policies and procedures designed to maintain or restore an organization's business operations, including IT services, in the event of emergencies, system failures, or disasters. It ensures operational resilience and…
Question
Management policy and procedures designed to maintain or restore business operations, including computer operations, possibly at an alternate location, in the event of emergencies, system failures, or disaster. Response:
Options
- AContingency Plan
- BOperations Plan
- CDisaster Recovery Plan
- DIncident Response Plan
How the community answered
(40 responses)- A93% (37)
- B5% (2)
- D3% (1)
Why each option
A Contingency Plan is a comprehensive set of management policies and procedures designed to maintain or restore an organization's business operations, including IT services, in the event of emergencies, system failures, or disasters. It ensures operational resilience and business continuity.
A Contingency Plan is a broad management document that defines the policies and procedures to ensure the continuity or restoration of business operations, including computer and network operations, possibly at an alternate location, following any disruptive event like emergencies, system failures, or disasters. It encompasses various strategies to mitigate the impact of such events and maintain essential functions.
An Operations Plan details routine daily activities and procedures for normal functioning, not for emergency or disaster recovery.
A Disaster Recovery Plan (DRP) is a specific component of a broader contingency plan, focusing primarily on restoring IT systems and infrastructure after a disaster, rather than the entire business operation.
An Incident Response Plan outlines steps for detecting, analyzing, containing, eradicating, and recovering from specific security incidents, not general business operations restoration during wide-scale disruptions.
Concept tested: Business continuity and disaster recovery planning
Source: https://csrc.nist.gov/glossary/term/contingency-plan
Topics
Community Discussion
No community discussion yet for this question.