Performing the First Step: Implementing the Contingency Plan

B.

A data backup is the first step in contingency planning.

Without data, there is nothing to process.

"No backup, no recovery"

Backup for hardware should be taken care of next.

Formal arrangements must be made for alternate processing capability in case the need should arise.

Operating systems and application software should be taken care of afterwards.

Source: VALLABHANENI, S.

Rao, CISSP Examination Textbooks, Volume 2: Practice, SRV Professional Publications, 2002, Chapter 8, Business Continuity Planning & Disaster Recovery Planning (page 506).

The correct answer is B. A data backup.

A contingency plan is a set of procedures and protocols to be followed in the event of an unexpected event that disrupts normal business operations. The goal of a contingency plan is to minimize the impact of the disruption and enable the organization to continue to function as normally as possible.

The first step in implementing a contingency plan is to perform a data backup. Data is the lifeblood of any organization, and in the event of a disruption, it is critical to have a recent and complete backup of all data. This backup should include all critical data, including customer data, financial data, and any other data essential to the organization's operations.

Performing a data backup should be done on a regular basis as part of an organization's routine operations. However, in the context of a contingency plan, it is important to ensure that the backup is recent and that it includes all critical data. This backup should be stored in a secure location, preferably off-site, to ensure that it is safe from any physical damage that may occur on the organization's premises.

Once a data backup has been completed, the organization can move on to the next steps in implementing the contingency plan, which may include restoring the backup data, activating alternative systems or procedures, and communicating with customers and stakeholders about the situation.