Which of the following plans is a comprehensive statement of consistent actions to be taken before, during, and after a disruptive event that causes a significant loss of information systems resources?

A Disaster Recovery Plan (DRP) is the specific, technical plan focused on the actions required to recover and restore information systems, data, and IT infrastructure following a disruptive event. The question's key phrase, "significant loss of information systems resources," directly aligns with the primary purpose of a DRP. While a DRP is a component of broader continuity efforts, it is the principal document that addresses the detailed procedures for responding to a technology-centric disaster before, during, and after the event to restore system functionality.

B. Contingency plan: This is a high-level, umbrella term that encompasses various plans (including DRP and BCP) for system recovery, making it less specific than the correct answer.
C. Business Continuity plan: This plan has a broader, strategic focus on maintaining critical business functions and processes, not just the recovery of information technology resources.
D. Continuity of Operations plan: Similar to a BCP, this plan focuses on sustaining an organization's mission-essential functions at an alternate site, a scope wider than just IT systems recovery.

1. National Institute of Standards and Technology (NIST) Special Publication 800-34 Rev. 1

Contingency Planning Guide for Federal Information Systems.

Section 2.3

Page 7: Defines a Disaster Recovery Plan (DRP) as "a plan for recovering and protecting a business infrastructure in the event of a disaster... DRPs are generally IT-focused". This directly supports the choice of DRP for a plan concerning "information systems resources."

Section 2.3

Page 7: Defines a Business Continuity Plan (BCP) as focusing "on sustaining an organization’s business functions during and after a disruption

" highlighting its broader

business-process scope.

Section 2.2

Page 6: Describes Contingency Planning as the overall "coordinated strategy involving plans

procedures

and technical measures

" confirming its status as an umbrella concept.

2. FIPS PUB 199

Standards for Security Categorization of Federal Information and Information Systems.

Appendix A

Page 8: In the context of Availability

it discusses contingency plans (which include DRPs) as the primary means to ensure "timely and reliable access to and use of information

" reinforcing the link between these plans and the operational status of information systems. The DRP is the specific implementation for disaster scenarios.