What is the purpose of a disaster recovery plan (DRP)?

A disaster recovery plan (DRP) is specifically designed to ensure that an organization can recover its IT infrastructure and services after a disruptive event. This plan outlines the steps and processes needed to restore critical systems, data, applications, and networks to a functional state following incidents such as natural disasters, cyberattacks, or system failures.

The focus of a DRP is on the operational aspects of recovery, emphasizing the restoration of technology and services essential for supporting ongoing business operations. While ensuring business continuity is also an important aspect of overall business resilience, the DRP specifically addresses the recovery phase and the continuity of IT-related services post-disruption. This includes predefined procedures, roles, and responsibilities in the aftermath of an event that impacts IT systems.

The other options touch on relevant concepts but do not accurately capture the primary focus of a disaster recovery plan. For instance, business continuity extends beyond just IT recovery and involves broader organizational strategies to maintain operations. Improving organizational efficiency or mandating security controls relates to other aspects of IT management that are not the central purpose of a DRP. Thus, the correct answer centers on the DRP's specific role in recovering IT infrastructure and ensuring services are reinstated after disruptions.