CIPS Exam L5M2 Topic 1 Question 3 Discussion

Answers 2 and 4 are correct. A Business Continuity Plan is held at the top level, not a disaster recovery plan. This can be held at the department level- or whoever would have the ability to enact this if a disaster were to happen. A company is likely to have several Disaster Recovery Plans for different departments and different scenarios so several people within the organisation may be accountable for these. Option 3 is incorrect as the focus is on recovering systems (e.g. getting people back online) not on profit. P.155