1. Home
2. All questions
3. Question 826

CISM study material · question 826 of 1000

Recovery validates that essential services are restored in the appropriate order. What does NIST's guidance imply about when that order is decided?

• Incident management

1. During the incident itself, by the incident lead who has been appointed to run the whole response to that incident
2. By each of the individual system owners independently, during the recovery of their own particular systems from it
3. After the whole of the recovery has finished, at the point at which the after-action report for the incident is being written up
4. Before the incident, since the recovery order is part of planning rather than an in-the-moment judgement

Challenge yourself on this topic → Study as cards