nerdexam
(ISC)2

CISSP · Question #1520

Drag and Drop Question Below are the common phases to creating a Business Continuity/Disaster Recovery (BC/DR) plan. Drag the remaining BC\DR phases to the appropriate corresponding location. Answer:

The correct sequence of BC/DR phases follows a logical progression: Risk Assessment identifies potential threats, Business Impact Analysis (BIA) evaluates the effect of those threats on operations, Mitigation Strategy Development creates plans to reduce risk, BC/DR Plan…

Submitted by javi_es· Mar 5, 2026Security and Risk Management - specifically the development, implementation, and management of BC/DR plans as tested in certifications such as CISSP (Domain 1), CompTIA Security+, and CISM.

Question

Drag and Drop Question Below are the common phases to creating a Business Continuity/Disaster Recovery (BC/DR) plan. Drag the remaining BC\DR phases to the appropriate corresponding location. Answer:

Exhibit

CISSP question #1520 exhibit

Options

  • Box1Risk, Assessment
  • Box2Business Impact Analysis
  • Box3Mitigation Strategy Development
  • Box4BC/DR Plan Development
  • Box5Training, Testing & Auditing
  • Box6Plan Maintenance

Explanation

The correct sequence of BC/DR phases follows a logical progression: Risk Assessment identifies potential threats, Business Impact Analysis (BIA) evaluates the effect of those threats on operations, Mitigation Strategy Development creates plans to reduce risk, BC/DR Plan Development formalizes the documented response, Training/Testing/Auditing validates the plan's effectiveness, and Plan Maintenance keeps it current. This order ensures each phase builds upon the previous one - you cannot develop mitigation strategies without first understanding risks and business impacts, and you cannot test a plan that hasn't been developed yet. The sequence is an industry-standard framework recognized by organizations such as NIST, ISO 22301, and DRII.

Topics

#Business Continuity Planning#Disaster Recovery#Risk Management#Security Governance

Community Discussion

No community discussion yet for this question.

Full CISSP Practice