Certified Information Systems Auditor (CISA) — Question 1027

Documentation of workaround processes to keep a business function operational during recovery of IT systems is a core part of a:

Answer options

• A. disaster recovery plan (DRP).
• B. business continuity plan (BCP).
• C. threat and risk assessment.
• D. business impact analysis (BIA).

Correct answer: B

Explanation

The correct answer is B, as a business continuity plan (BCP) specifically focuses on maintaining essential functions during disruptions. While a disaster recovery plan (DRP) deals with restoring IT systems, it does not encompass the broader scope of maintaining business operations like a BCP does.