Which of the following are PRIMARY elements that are required when designing a Disaster Recovery
Plan (DRP)?

A.
Back-up procedures, off-site storage, and data recover.

B.
Steering committee, emergency response team, and reconstruction team.

C.
Impact assessment, recover strategy, and testing.

D.
Insurance coverage, alternate site, and manual procedures.

Explanation:
The most critical piece to disaster recovery and continuity planning is management support. They
must be convinced of its necessity. Therefore, a business case must be made to obtain this support.
The business case can include current vulnerabilities, regulatory and legal obligations, current status
of recovery plans, and recommendations. Management will mostly concerned with cost/benefit
issues, so several preliminary numbers will need to be gathered and potential losses estimated. –
Shon Harris All-in-one CISSP Certification Guide pg 595 There are four major elements of the BCP
process Scope and Plan Initiation – this phase marks the beginning of the BCP process. IT entails
creating the scope and other elements needed to define the parameters of the plan. Business Impact
Assessment – A BIA is a process used to help business units understand the impact of a disruptive
event. This phase includes the execution of a vulnerability assessment Business Continuity Plan
Development – This term refers to using the information collection in the BIA to develop the actual
business continuity plan. This process includes the areas of plan implementation, plan testing, and
ongoing plan maintenance. Plan Approval and Implementation – This process involves getting the
final senior management signoff, creating enterprise-wide awareness of the plan, and implementing
a maintenance procedure for updating the plan as needed. -Ronald Krutz The CISSP PREP Guide (gold
edition) pg 380-381