Study. uk . com
  1. Home
  2. All questions
  3. Question 830

CISM study material · question 830 of 1000

How does NIST relate recovery communication to the communication performed during response?

  1. Recovery communication is restricted to internal audiences
  2. Recovery communication is optional wherever the incident was contained quickly enough for no service at all to have been lost
  3. Recovery communication is a continuation of the response communication activities rather than a separate effort
  4. Recovery communication replaces the response communication entirely once the recovery work itself has begun in earnest here
Show the answer

Answer: C. Recovery communication is a continuation of the response communication activities rather than a separate effort

SP 800-61r3 notes that incident recovery communication is a continuation of the communication activities under incident response reporting and communication.

Source: NIST SP 800-61 Rev. 3 (NIST) — Table 3 RC.CO.N1

Challenge yourself on this topic → Study as cards