Theprimarydifference between aBusiness Continuity Plan (BCP)and aDisaster Recovery Plan (DRP)lies in theirtimeframe for activationand overall scope.
* BCP (Business Continuity Plan):
* Focuses on ensuring that criticalbusiness processescontinue operatingduring and after a disruption.
* It includes strategies for maintaining operations (e.g., alternative work locations, manual procedures, supplier dependencies).
* Activated immediatelywhen a disruption occurs tokeep the business running.
* DRP (Disaster Recovery Plan):
* Primarily focuses on therecovery of IT systems and infrastructureafter a disruption.
* It includes steps forrestoring data, servers, and applicationsto bring IT operations back to normal.
* Activated after the disaster eventtorestore normal IT operations.
Thetimeframefor activation is the key difference because:
* BCPis implementedimmediatelyto ensure business continuity.
* DRPis implementedafterthe disaster to restore IT operations.
* A. The annual testing requirements# Both BCP and DRP require regular testing, so this is not the key differentiator.
* B. The focus on system recovery# Only DRP focuses on system recovery, but the BCP covers more than just IT. The key difference is still the timeframe.
* D. The involvement of senior management# Senior management is involved in both plans, so this is not the primary distinction.
* ISACA CISA Review Manual, 28th Edition, Chapter 4:Information Systems Operations and Business Resilience Why Not the Other Options?References: