Isaca CISM Question Answer
A business continuity plan (BCP) should contain:
Hardware and software inventories
Data restoration procedures
Information about eradication activities
Criteria for activation
Criteria for activation are essential to ensure that the BCP is triggered appropriately in response to a disruption.
“The BCP should include clearly defined activation criteria to ensure that plans are invoked when necessary.”
— CISM Review Manual 15th Edition, Chapter 3: Information Security Program Development and Management, Section: Business Continuity Planning*
ISACA’s practice questions confirm that criteria for activation are core to a BCP’s effectiveness.
TESTED 06 Jul 2025
Copyright © 2014-2025 ACE4Sure. All Rights Reserved