Which term is a documented collection of procedures and information maintained for use during an incident?

Which term is a documented collection of procedures and information maintained for use during an incident?

• A. Preparedness
• B. Record
• C. Response and Recovery Plan
• D. Residual Risk

Answer: (C)

Having a formal guide ready for action during and after an incident is essential. The Response and Recovery Plan is that documented collection of procedures and information kept specifically for use when an incident occurs. It acts as the playbook for who does what, how to communicate, how to mobilize resources, and the step-by-step actions needed to respond and then recover operations. This plan is prepared in advance, regularly tested, and updated so it can be reliably followed under real-event conditions. Preparedness is about overall readiness—training, drills, resources, and general readiness across the organization—not the single incident guide used at the moment an incident unfolds. A record is documentation of activities or data gathered, not the operational guide for handling an incident. Residual risk refers to what remains after controls are in place, not a document used during incident response.

Having a formal guide ready for action during and after an incident is essential. The Response and Recovery Plan is that documented collection of procedures and information kept specifically for use when an incident occurs. It acts as the playbook for who does what, how to communicate, how to mobilize resources, and the step-by-step actions needed to respond and then recover operations. This plan is prepared in advance, regularly tested, and updated so it can be reliably followed under real-event conditions.

Preparedness is about overall readiness—training, drills, resources, and general readiness across the organization—not the single incident guide used at the moment an incident unfolds. A record is documentation of activities or data gathered, not the operational guide for handling an incident. Residual risk refers to what remains after controls are in place, not a document used during incident response.