(ISC)2 Certified in Cybersecurity Practice Exam

What is a Business Continuity Plan (BCP)?

1. A plan for mitigating financial losses during a crisis

2. A set of instructions for sustaining business processes during a disruption

3. A strategy for increasing market share after a natural disaster

4. A financial plan for operational costs

The correct answer is: A set of instructions for sustaining business processes during a disruption

A Business Continuity Plan (BCP) is fundamentally defined as a set of instructions or procedures that help an organization maintain or quickly resume critical operations and services during an unplanned disruption. This could include various scenarios such as natural disasters, cyberattacks, or other emergencies that threaten business operations. The emphasis of a BCP is on sustaining essential business functions, ensuring that the business can deal with incidents without significant interruption. It includes strategies regarding resource allocation, communication plans, and recovery protocols that are essential to stabilizing the organization during a crisis. This holistic approach is key in minimizing the adverse effects of disruptions, which underscores why the chosen answer accurately captures the essence of a BCP. In comparison to the other options, mitigating financial losses during a crisis is a consequence or goal of a BCP rather than its definition. Increasing market share post-disaster hints at a strategic initiative but does not reflect the core purpose of a BCP, which is operational continuity. A financial plan focused on operational costs may intersect with aspects of a BCP but is too narrowly focused on finances to encompass the broader operational preparedness that a BCP entails. Thus, the chosen response correctly identifies the primary objective and structure of a Business Continuity Plan.