Study. uk . com
  1. Home
  2. All questions
  3. Question 823

CISM study material · question 823 of 1000

Which two things must everyone with recovery responsibilities be told, according to NIST? Choose two.

  1. The authorisations required to implement each aspect of those plans
  2. The plans for recovery
  3. The identity of the threat actor that was held responsible for causing the incident
  4. The cost of the recovery to date
Show the answer

Answer: B. The plans for recovery
A. The authorisations required to implement each aspect of those plans

SP 800-61r3 asks that anyone holding a recovery responsibility knows both what the recovery plans say and what approvals each part of them will need.

Source: NIST SP 800-61 Rev. 3 (NIST) — Table 3 RC.RP-01.R2

Challenge yourself on this topic → Study as cards