A new analyst at a logistics firm is asked to explain what a business continuity plan is fundamentally intended to achieve. Which statement best captures the core purpose of a business continuity plan?
- AIt keeps the organisation's critical business functions running, or quickly resumed, during and after a disruptive event. Correct
- BIt restores IT systems and data to a working state after a technical failure or outage.
- CIt documents how the security team will detect, contain, and eradicate an active cyber attack.
- DIt lists the hardware and software assets the organisation owns for insurance purposes.
Why A is correct: This is correct because the business continuity plan exists to sustain or rapidly restore the delivery of critical functions and services when normal operations are disrupted.
Why B is wrong: This describes disaster recovery, which focuses on technology restoration. It is tempting because DR is part of resilience planning, but the business continuity plan has a broader aim than rebuilding systems.
Why C is wrong: This describes incident response, which handles security events. It is tempting because incidents can trigger continuity plans, but detection and containment are not the plan's central goal.
Why D is wrong: An asset inventory supports several processes but is not the purpose of continuity planning. It is tempting because a plan draws on asset data, yet the plan is about maintaining operations, not cataloguing property.