Security and Risk Management
Question #143
When should a Business Continuity Plan (BCP) be updated to ensure it remains effective and relevant?
A. Every time a new employee is hired.
B. Only before an external audit.
C. Only during the recovery phase of a security incident.
D. Regularly at specified intervals (once/twice a year) and when systems change.
Domain Concept: Security and Risk Management
This scenario evaluates management-level decision making in Security and Risk Management. In CISSP exam scenarios, evaluate answers through executive governance, risk assessment, life safety, and due diligence before implementing technical controls.
💡 View the Answer & Detailed Explanation
The correct answer to this scenario-based question requires an understanding of the CISSP Managerial Mindset. Register to view our in-depth explanation and access 1100+ adaptive questions completely free.