Question

A regional bank's executive team asks the security manager to clarify the difference between the organization's Business Continuity Plan (BCP) and its Disaster Recovery Plan (DRP) before approving budget for both. The manager needs to explain how the two efforts relate. Which statement most accurately describes the relationship and scope of these plans?

Accepted Answer

The BCP is a broad, business-focused strategy for sustaining critical operations during a disruption, while the DRP is a subordinate, technical plan focused on restoring IT systems and infrastructure.

Answer

The DRP is the overarching business strategy, and the BCP is the technical subset that recovers servers, networks, and applications after an outage.

Answer

The BCP and DRP are interchangeable terms for the same document and only one needs to be funded to satisfy regulatory requirements.

Answer

The DRP addresses long-term relocation of the entire business, while the BCP is limited to backing up and restoring data files.