Certified Incident Handler (CIH) Practice Ecam

Which of the following is NOT a major component of an IT contingency plan?

1. Supporting information

2. Monitoring and reporting

3. Notification activation

4. Recovery and reconstitution

The correct answer is: Monitoring and reporting

Monitoring and reporting is not typically categorized as a major component of an IT contingency plan. Instead, major components usually emphasize actionable plans and processes that focus on preparing, responding, and recovering from incidents. Key elements often include supporting information, which provides background knowledge and resource references; notification activation, which details how to alert team members and stakeholders during an incident; and recovery and reconstitution, which outlines strategies for restoring operations after a disruption. While monitoring and reporting are essential for assessing an incident's impact and the effectiveness of the plan, they do not fit into the primary framework of what constitutes a contingency plan. Hence, the distinction lies in the fact that monitoring and reporting serve more as supportive activities rather than core components essential for responding to and recovering from an incident.