Isaca
CISM · Question #970
The PRIMARY reason to create a business continuity plan (BCP) is for incident:
The correct answer is C. prevention and mitigation.. A business continuity plan is primarily created to ensure critical business functions can continue (or be restored quickly) during disruptive events, which is focused on mitigating the business impact of incidents rather than incident handling steps like triage or reporting.
Submitted by naveen.iyer· Apr 18, 2026Information Security Risk Management
Question
The PRIMARY reason to create a business continuity plan (BCP) is for incident:
Options
- Aescalation and triaging.
- Bidentification and communication.
- Cprevention and mitigation.
- Dreporting and response initiation.
How the community answered
(45 responses)- A2% (1)
- C96% (43)
- D2% (1)
Explanation
A business continuity plan is primarily created to ensure critical business functions can continue (or be restored quickly) during disruptive events, which is focused on mitigating the business impact of incidents rather than incident handling steps like triage or reporting.
Topics
#Business Continuity Planning#Risk Mitigation#Organizational Resilience#Incident Prevention
Community Discussion
No community discussion yet for this question.