What is business continuity and disaster recovery in a software security context?

• A. Plans to maintain and restore critical operations after disruptions, including backups, failover, incident response, and recovery procedures.
• B. A marketing strategy for product launch.
• C. A plan to increase feature velocity without risk.
• D. A method to reduce code quality by outsourcing.

Answer: (A)

Business continuity and disaster recovery in a software security context are about ensuring essential operations stay available when disruptions occur and can be restored quickly after an incident. This includes planning and implementing backups to protect data, mechanisms for failover or redundant systems to keep services running during outages, procedures for detecting and responding to security incidents, and step-by-step recovery processes to bring systems back to normal. Business continuity focuses on keeping critical functions operating during disruptions, while disaster recovery targets restoring IT systems and data after a disaster or breach. Together, these elements create a resilient approach to threats like outages and ransomware, ensuring services remain accessible and information can be recovered. The other options describe marketing, increasing velocity without risk, or reducing quality through outsourcing, none of which address maintaining operations or recovering from incidents.