Study. uk . com
  1. Home
  2. All questions
  3. Question 746

CISM study material · question 746 of 1000

Which three plan types does NIST identify as relevant to incident response?

  1. The response plan, the recovery plan, and the reconstitution plan
  2. The security plan, the contingency plan, and the crisis communications plan used when an incident becomes public
  3. The incident response plan, the disaster recovery plan, and the occupant emergency plan covering the buildings
  4. The incident response plan, the vulnerability management plan, and the business continuity plan
Show the answer

Answer: D. The incident response plan, the vulnerability management plan, and the business continuity plan

SP 800-61r3 names three types of cybersecurity plan relevant to incident response: incident response plans providing the roadmap for the capability, vulnerability management plans, and business continuity plans.

Source: NIST SP 800-61 Rev. 3 (NIST) — Table 2 ID.IM-04.N1

Challenge yourself on this topic → Study as cards