nerdexam
GIAC

GSEC · Question #5

Which of the following elements is the most important requirement to ensuring the success of a business continuity plan?

The correct answer is C. Executive buy-in. Executive buy-in is the foundational requirement for a BCP because without leadership authority, no plan can receive the funding, organizational commitment, or enforcement power needed to be effective.

Reporting & Remediation

Question

Which of the following elements is the most important requirement to ensuring the success of a business continuity plan?

Options

  • ADisaster Recover Plans
  • BAnticipating all relevant threats
  • CExecutive buy-in
  • DClearly defining roles and responsibilities
  • ETraining

How the community answered

(21 responses)
  • A
    5% (1)
  • C
    76% (16)
  • D
    5% (1)
  • E
    14% (3)

Why each option

Executive buy-in is the foundational requirement for a BCP because without leadership authority, no plan can receive the funding, organizational commitment, or enforcement power needed to be effective.

ADisaster Recover Plans

Disaster Recovery Plans are a component within a BCP, not the primary success factor - they are dependent on executive support to be resourced and exercised.

BAnticipating all relevant threats

Anticipating all relevant threats is a valuable BCP activity but is inherently incomplete since no organization can predict every possible threat scenario.

CExecutive buy-inCorrect

Executive buy-in provides the organizational authority and resource allocation that makes every other BCP element possible - without it, plans cannot be mandated, funded, or enforced across the business. Leadership sponsorship ensures staff comply with roles, training is resourced, and DRPs are tested and maintained. All other BCP components are downstream of this single requirement.

DClearly defining roles and responsibilities

Clearly defining roles and responsibilities is important but cannot be enforced or acted upon without executive authority mandating compliance across the organization.

ETraining

Training is a downstream execution activity that only becomes effective after executive buy-in ensures the plan is resourced and participation is required.

Concept tested: Business continuity plan organizational success factors

Source: https://csrc.nist.gov/publications/detail/sp/800-34/rev-1/final

Topics

#business continuity#BCP#executive buy-in#risk management

Community Discussion

No community discussion yet for this question.

Full GSEC Practice