Which item related to business continuity is required to be included in the incident response plan?

• A. Only backup data
• B. Business recovery and continuity procedures
• C. No recovery procedures
• D. Operational budgets only

Answer: (B)

An incident response plan must include recovery and continuity steps so the organization can resume critical operations after an incident. This ensures there’s a clear path not only to detect and contain incidents but also to restore services, protect data, and keep business processes moving, aligning incident response with broader business continuity and disaster recovery activities. Relying only on backups misses the broader recovery actions, timelines, and coordination needed to return to normal operations. Having no recovery procedures or focusing only on budgets doesn’t address how to actually recover or maintain essential functions during and after an incident.