ITPEC FE Morning October 2021 Question 78

The scope includes device failures and malware as well as natural disasters — a BCP prepares for any event that can stop critical business.

A Business Continuity Plan identifies the critical business, decides how quickly it must be restored and how, and keeps the plan alive through training and review. It covers every cause of interruption: earthquakes and floods, but also system failures, cyberattacks, malware and pandemics.

Answer (a)

Why not others:

• •(b) — the people who must act in an emergency need to know the plan, so it is shared with the employees and relevant parties, not held back for senior managers
• •(c) — business depends on suppliers, outsourcers and partners, so the plan must also cover activities outside the company
• •(d) — recovery order is set by business impact (how critical the process is and how long it may be down), not by how easy it is to restore technically

Key rule: A BCP is judged by business impact: all causes of interruption, the whole supply chain, everyone who must act, and recovery ordered by criticality.

Corporate Activities · AI-written, may contain errors