Study. uk . com
  1. Home
  2. All questions
  3. Question 753

CISM study material · question 753 of 1000

Why does the incident response Community Profile rate backups as high priority when most Protect outcomes are rated medium?

  1. Because backups eliminate the need for any containment at all, since the affected data can simply be restored afterwards
  2. Because backups matter most for recovery when an incident has affected data integrity or availability
  3. Because backups are required by every regulator
  4. Because backups are the cheapest control to implement and so give the best return of any of the Protect outcomes listed
Show the answer

Answer: B. Because backups matter most for recovery when an incident has affected data integrity or availability

SP 800-61r3 marks PR.DS-11 high, noting backups carry particular weight for recovery once an incident has touched the integrity or availability of data.

Source: NIST SP 800-61 Rev. 3 (NIST) — Table 2 PR.DS-11

Challenge yourself on this topic → Study as cards