Study. uk . com
  1. Home
  2. All questions
  3. Question 855

CISM study material · question 855 of 1000

Which two statements about a cyber incident response plan are correct under NIST's plan taxonomy? Choose two.

  1. It addresses only those disruptions that require a full relocation of the affected service to an alternate site
  2. It may be included as an appendix of the business continuity plan
  3. It enables security personnel to identify, mitigate and recover from malicious computer incidents
  4. It replaces the need for a system contingency plan
Show the answer

Answer: C. It enables security personnel to identify, mitigate and recover from malicious computer incidents
B. It may be included as an appendix of the business continuity plan

SP 800-34r1 sets up the cyber incident response plan for attacks, letting security staff spot malicious incidents, limit them and recover, and allows it to sit as an appendix to the business continuity plan.

Source: NIST SP 800-34 Rev. 1 (NIST) — Sec. 2.2.5 Cyber Incident Response Plan

Challenge yourself on this topic → Study as cards