What is the key difference between a business continuity plan and a business conti- uity policy?
Answer Options
The plan describes how an organization will respond, whereas the policy outlines the high-level intent of the organization’s business continuity efforts.
The plan includes detailed steps for each part of the response, including how to restore systems and investigate issues, whereas the policy outlines the high-level intent of the organization’s business continuity efforts.
The plan describes the high-level intent of the organization’s business continuity efforts, whereas the incident response policy describes how the organization will respond.
They are the same; the terms are interchangeable.
Correct Answer: A
Explanation
Business continuity plans address how the organization will respond, including referencing runbooks that may detail how to handle restoration or other efforts on a step-by- step basis, but doesn’t itself include that level of detail. Business continuity policies describe the organization’s intent at a high level and are likely to reference the business continuity plan. They are not the same, as the policy is a higher-level document than the plan is.