Study. uk . com
  1. Home
  2. All questions
  3. Question 841

CISM study material · question 841 of 1000

Under which CSF 2.0 function does the upkeep of the incident response plan sit, and what does that placement reflect?

  1. Identify, under Improvement, tying plan maintenance to lessons learned
  2. Respond, under Incident Management, tying the upkeep of the plan to the active response
  3. Recover, under Incident Recovery Plan Execution, tying it to the restoration work
  4. Govern, under Policy, tying it to policy review
Show the answer

Answer: A. Identify, under Improvement, tying plan maintenance to lessons learned

CSF 2.0 subcategory ID.IM-04 places the establishment, communication, maintenance and improvement of incident response and other operational plans under the Improvement category of the Identify function.

Source: NIST CSWP 29 (NIST) — Appendix A ID.IM-04

Challenge yourself on this topic → Study as cards