Certified Information Security Manager (CISM) — Question 974
Which of the following is MOST important for the improvement of a business continuity plan (BCP)?
Answer options
- A. Implementing an IT resilience solution
- B. Implementing management reviews
- C. Documenting critical business processes
- D. Incorporating lessons learned
Correct answer: D
Explanation
Incorporating lessons learned is vital as it allows the organization to adapt and improve the BCP based on past experiences, ensuring better preparedness for future incidents. While the other options contribute to the plan, they do not provide the same level of continuous improvement as learning from previous events.