Study. uk . com
  1. Home
  2. All questions
  3. Question 285

CISM study material · question 285 of 1000

An organisation already maintains business impact analysis records for continuity planning. Which further use does IR 8286 suggest for that template?

  1. Replacing the risk register with it
  2. Using it to set the organisation's risk appetite
  3. Substituting it for the security categorisation process
  4. Reusing it to evaluate, record and monitor the criticality and sensitivity of enterprise assets consistently
Show the answer

Answer: D. Reusing it to evaluate, record and monitor the criticality and sensitivity of enterprise assets consistently

IR 8286 points risk managers at the business impact analysis template as a ready instrument for judging, recording and tracking how critical and how sensitive enterprise assets are, applied the same way each time.

Source: NIST IR 8286 (NIST) — Sec. 3.2.1 Inventory and Valuation of Assets

Challenge yourself on this topic → Study as cards