An IT manager is putting together a documented plan describing how the organization will keep operating in the event of a global incident. Which of the following plans is the IT manager creating?

Physical security focuses on protecting an organization's physical assets, such as facilities, equipment, and personnel, from threats like theft, vandalism, and natural disasters. While it is an important aspect of overall security strategy, it does not specifically address the operational continuity of the organization in the event of a global incident.

Change management involves the processes and methodologies used to manage the transition of individuals, teams, and organizations from a current state to a desired future state. It is primarily concerned with managing organizational change rather than ensuring operational continuity during incidents, making it irrelevant in this context.

Disaster recovery specifically addresses the restoration of IT systems and data after a significant disruption or disaster. While it is a critical component of business continuity, it is narrower in scope, focusing primarily on technology recovery rather than the overall operational continuity of the organization.