As his company’s business continuity coordinator, Matthew is responsible for helping recruit members to the business continuity planning (BCP) committee. Which of the following does not correctly describe this effort?

A.
Committee members should be involved with the planning stages, as well as the testing and implementation stages.

B.
The smaller the team the better, to keep meetings under control.

C.
The business continuity coordinator should work with management to appoint committee members.

D.
The team should consist of people from different departments across the company.

Explanation:
B: The BCP committee should be as large as it needs to be in order to represent each department within the organization. The team must be composed of people who are familiar
with the different departments within the company, because each department is unique in its functionality and has distinctive risks and threats. The best plan is when all issues and
threats are brought to the table and discussed. This cannot be done effectively with a few people who are familiar with only a couple of departments. The committee should be made
up of representatives from at least the following departments: business units, senior management, IT department, security department, communications department, and legal
department.
A is incorrect because it is true that committee members should be involved with the planning stages, as well as the testing and implementation stages. If Matthew, the BCP
coordinator, is a good management leader, he will understand that it is best to make team members feel a sense of ownership pertaining to their tasks and roles. The people who
develop the BCP should also be the ones who execute it. If you knew that in a time of crisis you would be expected to carry out some critical tasks, you might pay more attention during
the planning and testing phases.
C is incorrect because the BCP coordinator should work with management to appoint committee members. But management’s involvement does not stop there. The BCP team
should work with management to develop the ultimate goals of the plan, identify the critical parts of the business that must be dealt with first during a disaster, and ascertain the
priorities of departments and tasks. Management also needs to help direct the team on the scope of the project and the specific objectives.
D is incorrect because it is true that the team should be composed of people from different departments across the company. This is the only way the team will be able to consider
the distinctive risks and threats that each department faces.