Which of the following specifically addresses cyber-attacks against an organization’s IT systems?

A.
Continuity of support plan

B.
Business continuity plan

C.
Incident response plan

D.
Continuity of operations plan

Explanation:
A Cyber incident response plan focuses on malware, hackers, intrusions, attacks, and other security issues. It
outlines procedures for incident response. There are no other types of Incident response plans.
Incorrect Answers:
A: There is no continuity of support plan which addresses cyber-attacks. The Incident response plan addresses
cyber-attacks.
B: A business continuity plan (BCP) does address cyber-attacks. A BCP contains strategy documents that
provide detailed procedures that ensure critical business functions are maintained.
D: There is no continuity of operations plan which addresses cyber-attacks. The Incident response plan
addresses cyber-attacks.

Harris, Shon, All In One CISSP Exam Guide, 6th Edition, McGraw-Hill, 2013, p. 953