ISC2-CC domain - 10% of the exam

Business Continuity (BC), Disaster Recovery (DR) & Incident Response Concepts

Business Continuity (BC), Disaster Recovery (DR) & Incident Response Concepts is 10% of the ISC2 Certified in Cybersecurity (ISC2-CC) exam. These are the objectives it covers, each with practice questions and worked explanations.

Objectives in this domain

Sample question from this domain

Free sampleBusiness Continuity (BC), Disaster Recovery (DR) & Incident Response Conceptsmedium

A new analyst at a logistics firm is asked to explain what a business continuity plan is fundamentally intended to achieve. Which statement best captures the core purpose of a business continuity plan?

  • AIt keeps the organisation's critical business functions running, or quickly resumed, during and after a disruptive event. Correct
  • BIt restores IT systems and data to a working state after a technical failure or outage.
  • CIt documents how the security team will detect, contain, and eradicate an active cyber attack.
  • DIt lists the hardware and software assets the organisation owns for insurance purposes.
A business continuity plan aims to keep critical business functions operating or swiftly resumed through a disruption. Business continuity planning is outcome-focused on the survival of the organisation's essential functions, treating technology recovery as one enabling piece rather than the goal itself.

Why A is correct: This is correct because the business continuity plan exists to sustain or rapidly restore the delivery of critical functions and services when normal operations are disrupted.

Why B is wrong: This describes disaster recovery, which focuses on technology restoration. It is tempting because DR is part of resilience planning, but the business continuity plan has a broader aim than rebuilding systems.

Why C is wrong: This describes incident response, which handles security events. It is tempting because incidents can trigger continuity plans, but detection and containment are not the plan's central goal.

Why D is wrong: An asset inventory supports several processes but is not the purpose of continuity planning. It is tempting because a plan draws on asset data, yet the plan is about maintaining operations, not cataloguing property.

Other domains in this exam

See also the ISC2-CC cert hub, the study guide, and the cheat sheet.

Examworthy is not affiliated with or endorsed by ISC2. Original, blueprint-aligned practice material only.