nerdexam
(ISC)2

CISSP-ISSAP · Question #86

Which of the following plans is designed to protect critical business processes from natural or man-made failures or disasters and the resultant loss of capital due to the unavailability of normal bus

The correct answer is C. Business continuity plan. Business Continuity Plan (BCP) is correct because it is specifically designed to ensure that critical business processes continue operating during and after a disruption - whether natural (floods, earthquakes) or man-made (cyberattacks, power outages) - directly addressing the ri

Architect for Governance, Risk, and Compliance

Question

Which of the following plans is designed to protect critical business processes from natural or man-made failures or disasters and the resultant loss of capital due to the unavailability of normal business processes?

Options

  • ADisaster recovery plan
  • BContingency plan
  • CBusiness continuity plan
  • DCrisis communication plan

How the community answered

(17 responses)
  • A
    6% (1)
  • B
    6% (1)
  • C
    71% (12)
  • D
    18% (3)

Explanation

Business Continuity Plan (BCP) is correct because it is specifically designed to ensure that critical business processes continue operating during and after a disruption - whether natural (floods, earthquakes) or man-made (cyberattacks, power outages) - directly addressing the risk of capital loss from unavailable processes.

Why the distractors are wrong:

  • A. Disaster Recovery Plan (DRP) focuses narrowly on restoring IT systems and data after a disaster - it's a subset of BCP, not the broader umbrella.
  • B. Contingency Plan is a general-purpose "what-if" plan for handling unexpected events; it lacks the specific focus on continuous business operations and capital preservation.
  • D. Crisis Communication Plan governs how an organization communicates during a crisis (to stakeholders, media, employees) - it does not address protecting business processes or preventing financial loss.

Memory tip: Think of BCP as "keeping the business alive" - it's the most comprehensive plan. DRP keeps the data alive, Crisis Communication keeps the message alive, and Contingency is a generic backup plan. If the question mentions protecting business processes and capital, that's BCP territory.

Topics

#Business Continuity Planning#Disaster Recovery#Business Resilience#Risk Management

Community Discussion

No community discussion yet for this question.

Full CISSP-ISSAP Practice