What is the purpose of a business continuity plan (BCP)?

• A. To manage access control.
• B. Encrypt data at rest.
• C. To ensure critical business functions can continue during and after a disruption.
• D. To monitor networks.

Answer: (C)

The main idea is to keep essential business operations running when something disrupts normal activity. A business continuity plan identifies which functions are critical, what resources and dependencies they need, and the steps to keep them active or to resume them quickly after events like power outages, natural disasters, cyber incidents, or supply chain problems. It sets objectives for how fast you must recover (RTO) and how much data you can lose (RPO), assigns roles, outlines communication, and outlines backup sites and alternate processes. It’s also tested and updated to stay ready. While security controls like managing access, encrypting data, or monitoring networks are important parts of an organization’s overall resilience, they support the broader goal of continuity rather than defining its purpose. The difference from a disaster recovery plan is that DRP focuses specifically on restoring IT systems, whereas the BCP covers the ongoing operation of critical business functions across people, processes, and technology.