Which of the following are PRIMARY elements that are required when designing a Disaster
Recovery Plan (DRP)?

A.
Back-up procedures, off-site storage, and data recover.

B.
Steering committee, emergency response team, and reconstruction team.

C.
Impact assessment, recover strategy, and testing.

D.
Insurance coverage, alternate site, and manual procedures.

Explanation:
The most critical piece to disaster recovery and continuity planning is management
support. They must be convinced of its necessity. Therefore, a business case must be made to
obtain this support. The business case can include current vulnerabilities, regulatory and legal
obligations, current status of recovery plans, and recommendations. Management will mostly
concerned with cost/benefit issues, so several preliminary numbers will need to be gathered and
potential losses estimated. – Shon Harris All-in-one CISSP Certification Guide pg 595
There are four major elements of the BCP process
Scope and Plan Initiation – this phase marks the beginning of the BCP process. IT entails creating

the scope and other elements needed to define the parameters of the plan.
Business Impact Assessment – A BIA is a process used to help business units understand the
impact of a disruptive event. This phase includes the execution of a vulnerability assessment
Business Continuity Plan Development – This term refers to using the information collection in the
BIA to develop the actual business continuity plan. This process includes the areas of plan
implementation, plan testing, and ongoing plan maintenance.
Plan Approval and Implementation – This process involves getting the final senior management
signoff, creating enterprise-wide awareness of the plan, and implementing a maintenance
procedure for updating the plan as needed. -Ronald Krutz The CISSP PREP Guide (gold edition)
pg 380-381