(ISC)2 Certified in Cybersecurity Practice Exam

What is a business continuity plan?

1. A documented plan that specifies marketing strategies during disruptions

2. A documented plan that outlines steps to maintain critical business operations during disruptions

3. A detailed financial report for crisis management

4. A plan for training staff in disaster response

The correct answer is: A documented plan that outlines steps to maintain critical business operations during disruptions

A business continuity plan is fundamentally a documented strategy that outlines how an organization will maintain critical business operations in the event of disruptions, such as natural disasters, cyber-attacks, or other crises. This plan not only identifies essential functions and processes that must be preserved but also details the necessary steps and resources required to keep these operations running effectively during such events. The focus of this plan is to ensure that the organization can quickly resume its operations and minimize the impact of disruptions on its services and overall productivity. This entails risk assessment, continuity strategies, recovery procedures, and resource allocation. The other options provided do not capture the essence of what a business continuity plan encompasses. For instance, specifying marketing strategies or creating financial reports do not directly relate to the ongoing functioning of critical business operations during disruptive events. Similarly, while training staff in disaster response is important, it is only one component of a broader continuity strategy and does not represent the entire plan itself.