Study. uk . com
  1. Home
  2. All questions
  3. Question 847

CISM study material · question 847 of 1000

Which two scoping options does NIST allow for a business continuity plan? Choose two.

  1. Covering only the organisation's alternate site
  2. Covering the processes of a single business unit
  3. Covering only the functions deemed to be priorities
  4. Covering only systems categorised as high impact
Show the answer

Answer: B. Covering the processes of a single business unit
C. Covering only the functions deemed to be priorities

SP 800-34r1 lets the plan cover one business unit's processes or the whole organisation's, and allows a narrower cut confined to the functions treated as priorities.

Source: NIST SP 800-34 Rev. 1 (NIST) — Sec. 2.2.1 Business Continuity Plan

Challenge yourself on this topic → Study as cards