Which of the following recovery plans includes a monitoring process and triggers for initiating planned actions? Response:

A contingency plan is specifically designed to be executed in response to an unforeseen event or disruption. A core component of this plan, as defined by authoritative frameworks like NIST, is the "Activation and Notification Phase." This phase explicitly outlines the monitoring processes and the specific triggers or thresholds that must be met to initiate the planned recovery actions. The plan details who assesses the event, the criteria for declaring an incident, and the formal process for activating the recovery teams and procedures. This direct link between monitoring, triggers, and activation is a hallmark of a contingency plan.

B. Business continuity plan: This plan has a broader, strategic focus on maintaining critical business functions, not just the specific technical triggers for IT system recovery.

C. Disaster recovery plan: While it contains triggers, a DRP is a subset of a contingency plan, typically focused on recovering IT infrastructure from a major disaster, not all types of disruptions.

D. Continuity of Operations Plan: This is a government-centric equivalent of a BCP, focused on ensuring essential mission functions continue during an emergency, making it less specific to the question's context.

1. National Institute of Standards and Technology (NIST) Special Publication (SP) 800-34 Rev. 1, Contingency Planning Guide for Federal Information Systems.

Section 3.3, Page 19: "Activation and Notification Phase. This phase describes the process of activating the CP based on the recovery triggers identified... The plan should include explicit triggers for activation (e.g., outage duration exceeds RTO, outage is unrecoverable by local staff)." This directly links contingency plans with triggers.

Table 3-3, Page 20: This table outlines "Activation and Notification Phase Activities," which include assessing the outage to determine if the contingency plan should be activated, clearly indicating a monitoring and trigger process.

2. National Institute of Standards and Technology (NIST) Special Publication (SP) 800-53 Rev. 5, Security and Privacy Controls for Information Systems and Organizations.

Control CP-2, Contingency Plan, Discussion Section: This section states that contingency plans are activated by events such as system disruptions or failures. The effectiveness of these activation procedures is a key part of contingency planning.