Study. uk . com
  1. Home
  2. All questions
  3. Question 846

CISM study material · question 846 of 1000

How does NIST distinguish continuity planning from contingency planning?

  1. Continuity planning covers the physical disruption of a whole site; contingency planning covers a cyber attack on the systems that the site itself happens to run
  2. Continuity planning concerns keeping the mission and its processes running; contingency planning concerns recovering the systems that support them
  3. Continuity planning is strategic; contingency planning is tactical
  4. The two terms describe the same activity at different scales
Show the answer

Answer: B. Continuity planning concerns keeping the mission and its processes running; contingency planning concerns recovering the systems that support them

SP 800-34r1 states continuity planning normally applies to the mission or business itself, concerning the ability to continue critical functions, while contingency planning normally applies to information systems and the steps needed to recover them.

Source: NIST SP 800-34 Rev. 1 (NIST) — Sec. 2.2 Types of Plans

Challenge yourself on this topic → Study as cards