In an emergency situation, put the following phases into chronological order as to when they would be activated 1) disaster recover plan 2) incident response 3) business continuity plan

The chronological order of activation in an emergency begins with Incident Response (2), which is the immediate, tactical reaction to detect, contain, and mitigate a disruptive event. If the incident is severe and overwhelms normal operations, it is classified as a disaster, triggering the Disaster Recovery Plan (1). This plan focuses specifically on restoring critical IT systems, infrastructure, and data. The Business Continuity Plan (3) is the overarching strategic framework that is activated to ensure essential business functions continue during and after the disaster. It encompasses the DRP but also includes personnel, facilities, and processes to guide the organisation back to normal operations.

A. 1, 2, 3: Incorrect. Incident response is the initial trigger for any plan; it must come before a disaster is declared and recovery is initiated.
B. 1, 3, 2: Incorrect. Incident response is the first action taken in response to an event, not the last phase of the process.
D. 3, 1, 2: Incorrect. While the BCP is the overall strategy, the tactical incident response is the first plan to be actively executed when an event occurs.

1. National Institute of Standards and Technology (NIST). (2010). Special Publication 800-34 Rev. 1: Contingency Planning Guide for Federal Information Systems. Section 2.3, "Relationship Among Contingency-Related Plans," outlines the hierarchy where incident response precedes disaster recovery, and both are components of the broader business continuity plan. This establishes the sequence of activation from immediate response to system recovery to overall business function maintenance.

2. CIPS. (2018). Managing Supply Chain Risk (L5M2). CIPS Official Course Book. Chapter 5, "Business continuity and the supply chain," explains that business continuity management (BCM) is the holistic process for ensuring organisational resilience. It details that incident management is the immediate response, while disaster recovery is a specific component focused on restoring technology and infrastructure following a major incident.

3. Sadgrove, K. (2016). The Complete Guide to Business Risk Management (3rd ed.). Routledge. Chapter 15, "Business continuity management," clarifies that incident management procedures are the first to be invoked. If the incident is catastrophic, disaster recovery and business continuity plans are then activated to manage the crisis and restore operations. (DOI: https://doi.org/10.4324/9781315562533)