ISC2 Certified in Cybersecurity (CC) Practice Question

A Business Continuity Plan (BCP) documents how an organization will continue critical functions during and after a disruption. One key element is a notification system, often implemented as a call tree or contact list that shows who must be reached, in what order, and by what means. This ensures employees, stakeholders, and third-party partners receive instructions quickly when normal channels may be unavailable. Daily vulnerability reports, annual financial statements, and software coding standards are useful documents in other contexts, but they are not typically included in a BCP because they do not guide the immediate continuation of business operations or communications during an emergency.