Discuss ISC2 CISSP Exam Topic 5 Question 110

A Business Continuity Plan (BCP) is based on

Athe policy and procedures manual.

Ban existing BCP from a similar organization.

Ca review of the business processes and procedures.

Da standard checklist of required items and objectives.

Suggested Answer: C

A Business Continuity Plan (BCP) is based on a review of the business processes and procedures. A BCP is a document that describes the strategies, actions, and resources that an organization will use to ensure the continuity of its critical business functions in the event of a disruption or disaster. A review of the business processes and procedures is a process that analyzes the current state of the organization's operations, such as the inputs, outputs, dependencies, resources, and risks of each business process or procedure. A review of the business processes and procedures helps to identify the critical business functions, the recovery objectives, the recovery strategies, and the recovery roles and responsibilities that form the basis of the BCP. The policy and procedures manual, an existing BCP from a similar organization, and a standard checklist of required items and objectives are not the best sources for basing a BCP, as they may not reflect the specific needs, goals, and context of the organization or its business processes and procedures.Reference:CISSP All-in-One Exam Guide, Eighth Edition, Chapter 7, Security Operations, page 899.Official (ISC)2 CISSP CBK Reference, Fifth Edition, Chapter 7, Security Operations, page 915.

Get Premium CISSP Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

30 comments · newest first

Stefany 6 months ago

Overall, C feels most comprehensive for planning.

Jutta 6 months ago

I feel D is too generic. Checklists miss specifics.

Portia 6 months ago

A is also valid. Policies guide the BCP.

Latosha 7 months ago

I agree, C makes sense. Understand the business first.

Rodrigo 7 months ago

Wait, are we really saying B is a good option?

Delisa 7 months ago

D is just a checklist, not a real plan.

Rosina 8 months ago

I think B could work too, but it’s not ideal.

Willis 8 months ago

Definitely C, you need to know your processes!

Mirta 8 months ago

B might work in a pinch, but why reinvent the wheel when you can build it from the ground up?

Jamika 8 months ago

Haha, using another company's BCP? That's like copying your neighbor's homework!

Mila 8 months ago

D is too generic, a checklist alone won't capture the nuances of our organization.

Estrella 8 months ago

I agree, a thorough review of business processes is key to a robust BCP.

Carry 9 months ago

Option C seems the most comprehensive approach to developing a BCP.

Jina 9 months ago

I'm leaning towards option C, but I wonder if the policy manual also plays a significant role in shaping the BCP.

Estrella 9 months ago

I feel like the checklist option could be useful, but it seems too generic for a comprehensive BCP.

Alise 9 months ago

I'm a bit confused on this one. I'll have to think it through carefully and review my notes on BCPs before deciding.

Francisca 9 months ago

C makes the most sense to me. Understanding the core business processes is key to building an effective continuity plan.

Herminia 9 months ago

I'm leaning towards D. A standard checklist of required items and objectives seems like it would be a helpful framework for developing a comprehensive BCP.

Xochitl 10 months ago

I remember practicing a question similar to this, and I think it mentioned that existing BCPs can be helpful, but they shouldn't be the only source.

Freida 10 months ago

I think it's C. Reviewing processes is key.

Krystina 10 months ago

I think the BCP should really be based on a review of business processes, but I'm not entirely sure if that's the only factor.

Lorriane 10 months ago

Surprised that people think A is enough!

Fernanda 10 months ago

But B could work too. Learning from others is smart.

Carolann 11 months ago

Hmm, I'm not sure. I was thinking B might be the right answer since using an existing BCP from a similar organization could be a good starting point.

Tambra 11 months ago

I think C is the best answer here. A BCP should be based on a thorough review of the business processes and procedures to identify critical functions and risks.

Shaquana 5 months ago

↳ replying to Tambra

C ensures all critical functions are covered.

Colton 5 months ago

↳ replying to Tambra

A thorough review is essential for a solid BCP.

Sherita 6 months ago

↳ replying to Tambra

C helps identify risks effectively.

Precious 6 months ago

↳ replying to Tambra

Definitely! Understanding processes is key.

Verona 6 months ago

↳ replying to Tambra

I agree, C makes the most sense.

ISC2 CISSP Exam - Topic 5 Question 110 Discussion