nerdexam
(ISC)2

SSCP · Question #484

A contingency plan should address:

The correct answer is D. All answers are correct. A comprehensive contingency plan must address all categories of risk. Potential risks are those that have been identified as possible threats to operations. Identified risks are those that have been formally recognized through risk assessment. Residual risks are those that…

Submitted by paula_co· Apr 18, 2026Incident Response and Recovery

Question

A contingency plan should address:

Options

  • APotential risks.
  • BResidual risks.
  • CIdentified risks.
  • DAll answers are correct.

How the community answered

(36 responses)
  • A
    6% (2)
  • C
    3% (1)
  • D
    92% (33)

Explanation

A comprehensive contingency plan must address all categories of risk. Potential risks are those that have been identified as possible threats to operations. Identified risks are those that have been formally recognized through risk assessment. Residual risks are those that remain after security controls have been applied and accepted by management. Ignoring any of these categories would leave gaps in the plan, reducing the organization's ability to respond effectively to disruptive events.

Topics

#Contingency Planning#Risk Management#Business Continuity#Risk Types

Community Discussion

No community discussion yet for this question.

Full SSCP Practice