Skip to content

ACCA Strategic Professional · Strategic Business Leader · IT systems security and control

Kestrel Logistics runs its order system on a single server in its head office. A flood destroys the server room. Management has a documented plan covering how to restore IT systems, data and network links at an alternative site, but no plan for staff, premises or customer communication. Which description best fits this plan?

It is a disaster recovery plan, because it deals only with restoring IT systems, data and network links. A business continuity plan would be wider, covering staff, premises and communication, which Kestrel's document does not address.

  1. AA business continuity plan covering the whole organisation
  2. BA disaster recovery plan focused on restoring IT capabilityCorrect
  3. CA risk register identifying the flood threat
  4. DAn incident log recording the flood event

Explanation

A disaster recovery plan is the technology-focused component that restores systems, data and networks after a disruption. A business continuity plan is broader and also covers people, premises, suppliers and communication, which Kestrel lacks. The risk register and incident log record threats or events and do not restore anything.

Did you get it right without looking?

One question tells you little. A timed set on IT systems security and control shows your real accuracy, how long you take and where you lose marks.

Practise IT systems security and controlFree diagnostic mock

More IT systems security and control questions