ISC2 Certified in Cybersecurity (CC) Practice Question

The Business Continuity Plan (BCP) is the primary document that details how an organization will maintain or quickly resume essential operations after a disruption. It captures roles, responsibilities, response checklists, contact lists, and communication methods needed to keep critical products or services available. A Disaster Recovery Plan focuses more narrowly on restoring IT infrastructure, an Incident Response Plan centers on detecting and containing security breaches, and a Service Level Agreement is a contractual commitment that defines expected service performance but does not describe how to sustain operations when an outage occurs.