What is missing from the definition of response as 'recovery'?

• A. The phrase 'according to plan' must be added to 'recovery.'
• B. The definition must refer to specific resources.
• C. The phrase 'Reasonable degree of' must begin the definition.
• D. The phrase 'and prosecution' must be added after 'recovery.'

Answer: (A)

Recovery is the phase where systems and operations are restored after an incident, and it must be carried out in accordance with the organization's incident response or disaster recovery plan. The missing piece is the idea of doing this “according to plan” because restoration isn’t just about flipping switches back on—it’s about following predefined procedures, validating that affected services are securely restored, and meeting defined objectives (like timeframes and security requirements) to resume normal business operations.

Referencing specific resources isn’t essential to the definition of recovery, and adding a vague “reasonable degree of” makes the concept unclear. Including “and prosecution” belongs to legal actions beyond the actual restoration of services.