Systems Security Certified Practitioner – SSCP – Question0635

When preparing a business continuity plan, who of the following is responsible for identifying and prioritizing time-critical systems?

A.
Executive management staff
B. Senior business unit management
C. BCP committee
D. Functional business units

Correct Answer: B

Explanation:

Many elements of a BCP will address senior management, such as the statement of importance and priorities, the statement of organizational responsibility, and the statement of urgency and timing. Executive management staff initiates the project, gives final approval and gives ongoing support. The BCP committee directs the planning, implementation, and tests processes whereas functional business units participate in implementation and testing. Source: KRUTZ, Ronald L. & VINES, Russel D., The CISSP Prep Guide: Mastering the Ten Domains of Computer Security, John Wiley & Sons, 2001, Chapter 8: Business Continuity Planning and Disaster Recovery Planning (page 275).