Definition and Purpose:
* A Business Continuity Plan (BCP) is a document that outlines how a business will continue operating during an unplanned disruption in service. It focuses on the processes and procedures necessary to ensure that critical business functions can continue.
BCP Components:
* The BCP typically includes Business Impact Assessments (BIAs), which identify critical functions and the impact of a disruption.
* It also encompasses risk assessments, recovery strategies, and continuity strategies for critical business functions.
Explanation of Options:
* A methodical plan detailing the steps of incident response activities describes more of an Incident Response Plan (IRP).
* B a document of controls that reduce the risk of losing critical processes could be part of a BCP but is more characteristic of a risk management plan.
* C accurately reflects the BCP's focus on identifying and mitigating risks to business functions through BIAs, making it the most comprehensive and accurate description.
Conclusion:
* Therefore, C correctly identifies a BCP as a document that focuses on BIAs to manage risks to critical business processes.