SY0-301 · Question #358
When a communications plan is developed for disaster recovery and business continuity plans, the MOST relevant items to include would be: (Select TWO).
The correct answer is A. Methods and templates to respond to press requests, institutional and regulatory reporting requirements. B. Methods to exchange essential information to and from all response team members, employees, suppliers. A disaster recovery communications plan must address both external stakeholder messaging and internal operational coordination. Press response templates and inter-team information exchange are the core communications elements.
Question
When a communications plan is developed for disaster recovery and business continuity plans, the MOST relevant items to include would be: (Select TWO).
Options
- AMethods and templates to respond to press requests, institutional and regulatory reporting requirements.
- BMethods to exchange essential information to and from all response team members, employees, suppliers,
- CDeveloped recovery strategies, test plans, post-test evaluation and update processes.
- DDefined scenarios by type and scope of impact and dependencies, with quantification of loss potential.
- EMethods to review and report on system logs, incident response, and incident handling.
How the community answered
(19 responses)- A84% (16)
- D5% (1)
- E11% (2)
Why each option
A disaster recovery communications plan must address both external stakeholder messaging and internal operational coordination. Press response templates and inter-team information exchange are the core communications elements.
Methods and templates for responding to press inquiries and meeting institutional and regulatory reporting requirements are essential communications plan components, ensuring the organization speaks with a controlled, accurate voice during an incident and meets legal notification obligations.
Defining methods to exchange essential information among response teams, employees, suppliers, and other stakeholders ensures that all parties have the situational awareness needed to execute recovery actions and that no critical communications channel is overlooked.
Recovery strategies, test plans, and post-test evaluation are components of the recovery and testing plan sections of a BCP, not the communications plan.
Defining scenarios by type, scope, and loss potential belongs in the business impact analysis (BIA) phase, not the communications plan.
Reviewing system logs and conducting incident response and handling are operational IT security activities that belong in an incident response plan, not a DR communications plan.
Concept tested: DR/BCP communications plan components
Source: https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-34r1.pdf
Topics
Community Discussion
No community discussion yet for this question.