nerdexam
(ISC)2

SSCP · Question #489

Which of the following statements pertaining to the maintenance of an IT contingency plan is incorrect?

The correct answer is B. The Contingency Planning Coordinator should make sure that every employee gets an. It is incorrect that every employee should receive a copy of the IT contingency plan. Contingency plans often contain sensitive information about system architecture, recovery procedures, and organizational vulnerabilities that could be exploited if widely distributed…

Submitted by marco_it· Apr 18, 2026Incident Response and Recovery

Question

Which of the following statements pertaining to the maintenance of an IT contingency plan is incorrect?

Options

  • AThe plan should be reviewed at least once a year for accuracy and completeness.
  • BThe Contingency Planning Coordinator should make sure that every employee gets an
  • CStrict version control should be maintained.
  • DCopies of the plan should be provided to recovery personnel for storage offline at home

How the community answered

(18 responses)
  • A
    6% (1)
  • B
    94% (17)

Explanation

It is incorrect that every employee should receive a copy of the IT contingency plan. Contingency plans often contain sensitive information about system architecture, recovery procedures, and organizational vulnerabilities that could be exploited if widely distributed. Distribution should be limited to personnel with a direct role in executing the plan (e.g., recovery teams, key decision-makers). Copies stored offline at home by recovery personnel (option D) are appropriate for designated staff. Annual review, strict version control, and controlled distribution are all correct best practices for contingency plan maintenance.

Topics

#Contingency Planning#Disaster Recovery Plan (DRP)#Plan Maintenance#Security Operations

Community Discussion

No community discussion yet for this question.

Full SSCP Practice