Study. uk . com
  1. Home
  2. All questions
  3. Question 747

CISM study material · question 747 of 1000

Why does NIST require business continuity plans to be synchronised with incident response plans?

  1. Because continuity plans supersede incident response plans once a disruption has been formally declared
  2. Because both plans must be reviewed on the same date
  3. Because both plans share the same authorising official
  4. Because incidents can undermine the business resilience the continuity plan assumes
Show the answer

Answer: D. Because incidents can undermine the business resilience the continuity plan assumes

SP 800-61r3 asks for the two plans to be kept in step, because an incident can eat into the very business resilience the continuity plan takes for granted.

Source: NIST SP 800-61 Rev. 3 (NIST) — Table 2 ID.IM-04.R1

Challenge yourself on this topic → Study as cards