CompTIA Security+ (SY0-601) — Question 312

Stakeholders at an organization must be kept aware of any incidents and receive updates on status changes as they occur. Which of the following plans would fulfill this requirement?

Answer options

• A. Communication plan
• B. Disaster recovery plan
• C. Business continuity plan
• D. Risk plan

Correct answer: A

Explanation

The correct answer is A, the Communication plan, as it is specifically designed to keep stakeholders informed about incidents and their developments. The other plans, such as the Disaster recovery plan, Business continuity plan, and Risk plan, focus on different aspects of organizational resilience and may not directly address the need for ongoing stakeholder communication.