In CBCI 7.0, Enabling Solutions (PP5) focuses on implementing the agreed solutions produced in Solutions Design (PP4) and ensuring those solutions can be deployed through the response structure and BC plans. The GPG 7.0 Lite explains that once solutions have been specified and approved (PP4), they must be implemented before they can be deployed, and then supported by response structures and plans. Crucially, validation later confirms that implemented solutions work according to the agreed specifications. That means implementation must align to what was designed and approved—otherwise the organization risks implementing something that does not meet recovery requirements (e.g., RTOs, minimum capacity, dependency assumptions) and will likely fail validation or real incident use. Options A and B misunderstand governance: internal audit doesn’t “approve schedules” as a prerequisite, and the BC professional does not implement everything alone. Option D can undermine control; changes should be managed through governance/change control, not ad-hoc adjustment.
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit