Which document primarily outlines the processes to restore critical business functions during a disaster?

A.  Business Impact Analysis (BIA)

B.  Incident Response Plan (IRP)

C.  Disaster Recovery Plan (DRP)

D.  Standard Operating Procedure (SOP)

Correct Answer: C

Explanation:

Different types of documents and plans serve various purposes in the context of information security and business continuity. Here's a breakdown:

Business Impact Analysis (BIA): This document identifies the impact of a sudden loss of business functions, usually as a consequence of a disaster. It's more about assessing impact and prioritizing functions than outlining recovery processes.

Incident Response Plan (IRP): This focuses on the approach for identifying and responding to security incidents. It does not primarily deal with restoring business functions during a disaster.

Disaster Recovery Plan (DRP): This is the plan that outlines the processes to restore critical business functions in the event of a disaster. It details the steps to take for recovery of technology infrastructures, applications, and data.

Standard Operating Procedure (SOP): These are more general procedures that detail how specific tasks should be completed but may not necessarily focus on disaster recovery.