Certified Information Security Manager (CISM) — Question 1045

Which of the following BEST enables the capability of an organization to sustain the delivery of products and services within acceptable time frames and at predefined capacity during a disruption?

Answer options

• A. Business continuity plan (BCP)
• B. Disaster recovery plan (DRP)
• C. Business impact analysis (BIA)
• D. Service level agreement (SLA)

Correct answer: A

Explanation

The Business Continuity Plan (BCP) is designed to ensure that an organization can continue to operate and deliver services during and after a disruption. The Disaster Recovery Plan (DRP) focuses on restoring IT operations, while the Business Impact Analysis (BIA) assesses potential impacts of disruptions, and the Service Level Agreement (SLA) defines service expectations but does not address continuity during disruptions.