Study. uk . com
  1. Home
  2. All questions
  3. Question 822

CISM study material · question 822 of 1000

Which two activities does NIST include in executing an incident recovery plan? Choose two.

  1. Notifying the regulator of the breach
  2. Declaring the end of incident recovery and completing incident documentation
  3. Determining the root causes of it
  4. Verifying the integrity of recovered assets
Show the answer

Answer: D. Verifying the integrity of recovered assets
B. Declaring the end of incident recovery and completing incident documentation

SP 800-61r3's recovery execution covers choosing, ranking and safely carrying out recovery actions, proving recovered assets are intact, calling recovery finished, and finishing the incident's paperwork.

Source: NIST SP 800-61 Rev. 3 (NIST) — Table 3 RC.RP.N1

Challenge yourself on this topic → Study as cards