CISSP – Information Systems Security Management Professional (ISSMP) — Question 35
Which of the following strategies is used to minimize the effects of a disruptive event on a company, and is created to prevent interruptions to normal business activity?
Answer options
- A. Disaster Recovery Plan
- B. Continuity of Operations Plan
- C. Contingency Plan
- D. Business Continuity Plan
Correct answer: D
Explanation
The Business Continuity Plan (D) is specifically designed to maintain essential functions during and after a disruptive event. While a Disaster Recovery Plan (A) focuses on recovering IT systems, a Continuity of Operations Plan (B) and Contingency Plan (C) have broader scopes but do not explicitly ensure the continuation of business activities like the Business Continuity Plan does.