Certified Information Security Manager (CISM) — Question 910

A business continuity plan (BCP) should contain:

Answer options

• A. criteria for activation.
• B. hardware and software inventories.
• C. data restoration procedures.
• D. information about eradication activities.

Correct answer: A

Explanation

The correct answer is A, as a business continuity plan must specify the criteria for when it should be activated to effectively respond to disruptions. Options B, C, and D, while important, do not address the activation process crucial for initiating the BCP.