Which of the following have incorrect definition mapping when it comes to
disaster recovery steps?
i. Develop the continuity planning policy statement. Write a policy that provides
the guidance necessary to develop a BCP and that assigns authority to the necessary
roles to carry out these tasks.
ii. Conduct the business impact analysis (BIA). Identify critical functions and
systems and allow the organization to prioritize them based on necessity. Identify
vulnerabilities, threats, and calculate risks.
iii. Identify preventive controls. Once threats are recognized, identify and
implement controls and countermeasures to reduce the organization’s risk level in an
economical manner.
iv. Develop recovery strategies. Write procedures and guidelines for how the
organization can still stay functional in a crippled state.
v. Develop the contingency plan. Formulate methods to ensure systems and critical
functions can be brought online quickly.
vi. Test the plan and conduct training and exercises. Test the plan to identify
deficiencies in the BCP, and conduct training to properly prepare individuals on
their expected tasks.
vii. Maintain the plan. Put in place steps to ensure the BCP is a living document
that is updated regularly.

A.
iv, v

B.
ii, iv

C.
i, ii, iii

D.
i, vii, v

Explanation:
The correct disaster recovery steps and their associated definition
mappings are laid out below;
i. Develop the continuity planning policy statement. Write a policy that provides
the guidance necessary to develop a BCP and that assigns authority to the necessary
roles to carry out these tasks.
ii. Conduct the business impact analysis (BIA). Identify critical functions and
systems and allow the organization to prioritize them based on necessity. Identify
vulnerabilities, threats, and calculate risks.
iii. Identify preventive controls. Once threats are recognized, identify and
implement controls and countermeasures to reduce the organization’s risk level in an
economical manner.
iv. Develop recovery strategies. Formulate methods to ensure systems and critical
functions can be brought online quickly.
v. Develop the contingency plan. Write procedures and guidelines for how the
organization can still stay functional in a crippled state.
vi. Test the plan and conduct training and exercises. Test the plan to identify
deficiencies in the BCP, and conduct training to properly prepare individuals on
their expected tasks.
vii. Maintain the plan. Put in place steps to ensure the BCP is a living document
that is updated regularly.