CompTIA Security+ Exam Prep

Answer: C - Once completed, the BCP should be reviewed on a regular frequency. The frequency can be determined based on the business need. However, if additional information arises that could impact the BCP, then the BCP should be reviewed at that point as well.

The Business Continuity Plan that is created by the original chartered BCP team will serve as a good starting point for the company’s overall business continuity strategy. However, regular periodic reviews of the BCP will ensure that the information is not outdated and that the BCP is still a viable strategy. In addition to the regularly scheduled reviews, the BCP can also be reviewed and updated as needed based on external risk assessments, recent crises or disasters, industry trends, or results of BCP testing.