Study. uk . com
  1. Home
  2. All questions
  3. Question 831

CISM study material · question 831 of 1000

Which two recommendations does NIST make about communicating with suppliers during recovery? Choose two.

  1. Coordinating crisis communication between the organisation and its critical suppliers
  2. Publishing the recovery status updates on a portal that is shared with all of the suppliers involved
  3. Following the rules and protocols defined in contracts for incident information sharing
  4. Requiring each one of the suppliers to issue its own public statement about the incident as well as this
Show the answer

Answer: C. Following the rules and protocols defined in contracts for incident information sharing
A. Coordinating crisis communication between the organisation and its critical suppliers

SP 800-61r3 asks the organisation to work within whatever the contracts already say about sharing incident information with suppliers, and to coordinate crisis communication with the critical ones.

Source: NIST SP 800-61 Rev. 3 (NIST) — Table 3 RC.CO-03.R4

Challenge yourself on this topic → Study as cards