CISM · Question #175
An organization has suffered from a large-scale security event impacting a critical system. Following the decision to restore the system at an alternate location, which plan should be invoked?
The correct answer is C. Disaster recovery plan (DRP). The Disaster Recovery Plan (DRP) governs the technical recovery of IT systems, applications, and data - specifically including failover and restoration at alternate sites. Once the decision to restore at an alternate location has been made, the DRP provides the step-by-step…
Question
An organization has suffered from a large-scale security event impacting a critical system. Following the decision to restore the system at an alternate location, which plan should be invoked?
Options
- AIncident response plan
- BCommunications plan
- CDisaster recovery plan (DRP)
- DBusiness continuity plan (BCP)
How the community answered
(15 responses)- C93% (14)
- D7% (1)
Explanation
The Disaster Recovery Plan (DRP) governs the technical recovery of IT systems, applications, and data - specifically including failover and restoration at alternate sites. Once the decision to restore at an alternate location has been made, the DRP provides the step-by-step procedures for achieving that technical recovery objective (RTO, RPO, failover procedures, system rebuild steps). The Incident Response Plan (A) governs the detection, containment, and initial handling of the security event itself - it precedes the recovery decision. The Communications Plan (B) manages stakeholder notifications. The Business Continuity Plan (BCP) (D) addresses broader operational continuity across the organization, of which DRP is a subset focused on IT technical recovery.
Topics
Community Discussion
No community discussion yet for this question.