Isaca
CISM · Question #187
Which of the following should be done FIRST when developing a business continuity plan (BCP)?
The correct answer is B. Define the organizational strategy. The first step when developing a business continuity plan (BCP) is to define the organizational strategy. This ensures that the BCP aligns with the overall business objectives and provides a clear direction for recovery efforts in the event of a disruption.
Submitted by weili_xi· Apr 18, 2026Information Security Governance
Question
Which of the following should be done FIRST when developing a business continuity plan (BCP)?
Options
- AReview current recovery policies.
- BDefine the organizational strategy.
- CReview existing cyber insurance coverage.
- DPrioritize the critical processes.
How the community answered
(30 responses)- B93% (28)
- C3% (1)
- D3% (1)
Explanation
The first step when developing a business continuity plan (BCP) is to define the organizational strategy. This ensures that the BCP aligns with the overall business objectives and provides a clear direction for recovery efforts in the event of a disruption.
Topics
#Business Continuity Planning (BCP)#Organizational Strategy#BCP Development#Governance Alignment
Community Discussion
No community discussion yet for this question.