Certified Information Systems Security Professional (CISSP) — Question 442

In the "Do" phase of the Plan-Do-Check-Act model, which of the following is performed?

Answer options

• A. Maintain and improve the Business Continuity Management (BCM) system by taking corrective action, based on the results of management review.
• B. Monitor and review performance against business continuity policy and objectives, report the results to management for review, and determine and authorize actions for remediation and improvement.
• C. Ensure the business continuity policy, controls, processes, and procedures have been implemented.
• D. Ensure that business continuity policy, objectives, targets, controls, processes and procedures relevant to improving business continuity have been established.

Correct answer: C

Explanation

The correct answer is C because the 'Do' phase primarily focuses on the implementation of the established business continuity plans and procedures. Options A, B, and D pertain to maintenance, monitoring, and establishment, which are more relevant to other phases of the Plan-Do-Check-Act model.