ISC2 CC Business Continuity, DR & Incident Response Practice Question
Which document outlines the procedures for maintaining critical business functions during a disruption?
⚠ Common exam trap
ISC2 often tests the distinction between BCP and DRP, where candidates mistakenly choose Disaster Recovery Plan because they focus only on IT recovery, forgetting that BCP covers the broader business continuity including non-IT functions like manual order processing or alternate facilities.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Business Continuity Plan
The Business Continuity Plan (BCP) is the correct answer because it specifically outlines the procedures and strategies to maintain critical business functions during a disruption. Unlike other plans that focus on IT recovery or incident response, the BCP ensures that essential business operations continue, often by leveraging alternate work sites, manual workarounds, or scaled-down processes, until normal operations can be restored.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Business Continuity Plan
Why this is correct
The Business Continuity Plan documents how critical business functions continue during and after a disruption, covering people, processes and alternate working arrangements. It is broader than disaster recovery, which addresses only restoring IT systems and infrastructure.
- ✗
Continuity of Operations Plan
Why it's wrong here
A Continuity of Operations Plan focuses on relocating and sustaining an organisation's own essential functions, typically government or internal operations, rather than the business continuity management scope of maintaining critical business functions across a disruption. It is tempting because the names overlap, and it would be correct for COOP-specific relocation and delegation-of-authority scenarios.
- ✗
Incident Response Plan
Why it's wrong here
An Incident Response Plan addresses detecting, containing and eradicating a security incident, not sustaining critical business functions during disruption. It is tempting because both documents are invoked during crises, and it would be the correct choice when the question asks how to handle a breach, malware outbreak or forensic investigation.
- ✗
Disaster Recovery Plan
Why it's wrong here
A Disaster Recovery Plan restores IT infrastructure and data after an outage, focusing on recovery time and recovery point objectives for systems, not on keeping business functions running throughout the disruption. It is tempting because disaster recovery and continuity are often conflated, and it would be correct when the scenario asks how to rebuild failed servers or restore backups.
Go deeper
Related to this question
Learn chapter
Security Operations Basics
Key term
Business Continuity Planning
Business Continuity Planning is the process of creating a strategy to keep an organization's essential functions running during and after a major disruption.
Key term
BCP
BCP is a proactive process that creates a framework to ensure critical business functions continue during and after a disruptive event.
About these practice questions
Courseiva writes every CC question from scratch — 989 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This CC practice question is part of Courseiva's free ISC2 certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the CC exam.