Which of the following procedures is designed to enable security personnel to identify, mitigate, and recover from malicious computer incidents, such as unauthorized access to a system or data…

A Disaster Recovery Plan focuses on restoring IT infrastructure and operations after large-scale disruptions such as natural disasters, not specifically on responding to malicious cyber incidents.

A Cyber Incident Response Plan (CIRP) is a formal, documented set of procedures that outlines how an organization detects, responds to, and recovers from cybersecurity incidents such as unauthorized access, denial-of-service attacks, and unauthorized changes to systems or data. It covers the full incident lifecycle from identification through recovery, directly matching the description in the question. This distinguishes it from other plans that address communication, physical safety, or broad infrastructure recovery.

A Crisis Communication Plan addresses how an organization communicates with stakeholders during a crisis, not the technical procedures for identifying and mitigating cyber attacks.

An Occupant Emergency Plan covers physical safety and evacuation procedures for building occupants during emergencies, and is unrelated to cybersecurity incident response.