A security practitioner has been asked to model best practices for disaster recovery (DR) and business continuity. The practitioner has decided that a formal committee is needed to establish a business continuity policy. Which of the following BEST describes this stage of business continuity development?
In the context of business continuity development, the stage where a formal committee is established to set a business continuity policy is best described as Project Initiation and Management. This initial step involves organizing resources, defining scope, and setting the groundwork for the entire business continuity planning process. It does not fall under Business Impact Analysis (BIA), which is concerned with assessing the effects of disruption on business operations, nor does it pertain to Risk Evaluation and Control or Developing and Implementing business continuity plans (BCP), which are subsequent stages in the process.
Should be "Project Scope and Planning stage". Answer = B ?
B for sure
Selection of BCP team members
This is the ISC2 BCP framework not the NIST-34 framework. As CuteRabbit168 said, they're trying to confuse us with the wording. Should be Project Scope and Planning.
B. I couldn't find much, but this doc confirms it: http://www.dcag.com/images/pp1.pdf
Project initiation is one of the most important elements in BC/DR planning, because without full organizational support, the plan will be incomplete. As a planner, there may be limits to what you can do to create a functional, organization wide BC/DR Plan. https://www.mha-it.com/2012/08/03/bcdr-project-initiation/
The practitioner has decided that a formal committee is needed to establish a business continuity policy - this line says we need team members which could work on policy - this happened in very first stage , isnt it ?
Answer should be B - Project initiation
B is the answer: ! https://static.wixstatic.com/media/dc6afa_123b51694c0a46c9a8676d9f1876ea09~mv2.png/v1/fill/w_720,h_576,al_c,lg_1,q_90,enc_auto/dc6afa_123b51694c0a46c9a8676d9f1876ea09~mv2.png
D is correct. While project initiation and management is an important stage in the overall business continuity planning process, it is not specifically related to the Business Impact Analysis (BIA), which is the focus of the statement provided.
B is correct
B. Project Initiation and Management. During this stage of business continuity development, a formal committee is established to initiate and manage the business continuity planning process. This committee is responsible for defining the scope, objectives, and policies related to business continuity and disaster recovery. It's the initial step in the overall process of developing a comprehensive business continuity program, which includes activities such as business impact analysis (BIA), risk evaluation, and the development and implementation of business continuity plans (BCP).
Answer is Correct!! The Business Impact Analysis (BIA) is a key step in the continuity planning process. The BIA enables the Business Continuity Manager or Business Continuity Co-ordinator to fully characterise the systems requirements, processes and interdependences and use this information to determine continuity requirements and priorities.
D. Business Impact Analysis (BIA)
Project Initiation and Management is the best description for the stage where a formal committee is established to develop a business continuity policy. This is the stage where the foundation of a business continuity plan (BCP) is laid out, and a governance structure, such as a committee, is created to oversee and guide the development and implementation of the policy and related plans.