Certified Incident Handler (CIH) Practice Ecam

Which of the following is NOT an objective of an incident recovery plan?

1. Ensuring employee safety

2. Creating new business processes to maintain profitability

3. Restoring operations to normal

4. Minimizing disruptions

The correct answer is: Creating new business processes to maintain profitability

The objective that is not typically included in an incident recovery plan is the creation of new business processes to maintain profitability. An incident recovery plan primarily focuses on restoring normal operations after an incident, ensuring the safety of employees, and minimizing disruptions to the business. The reason the creation of new business processes falls outside the usual scope of an incident recovery plan is that such plans are generally aimed at responding to and recovering from incidents that have already occurred. The immediate goals usually revolve around bringing the business back to its operational norms rather than redesigning processes that could change the basic ways the business operates. While improving profitability is important and might happen as a long-term strategic goal after recovering from an incident, it is not a direct focus of the recovery phase. Instead, the recovery process should prioritize restoring what was disrupted and ensuring a stable environment for employees and operations.