Study. uk . com
  1. Home
  2. All questions
  3. Question 858

CISM study material · question 858 of 1000

What is the primary difference between an information system contingency plan and a disaster recovery plan?

  1. The contingency plan is technical while the disaster recovery plan is managerial
  2. The contingency plan is used for cyber incidents and the disaster recovery plan for physical ones
  3. The contingency plan covers data while the disaster recovery plan covers infrastructure
  4. The contingency plan recovers a system regardless of location, while the disaster recovery plan is site-specific
Show the answer

Answer: D. The contingency plan recovers a system regardless of location, while the disaster recovery plan is site-specific

SP 800-34r1 draws the line at location: contingency plan procedures recover the system wherever it runs, while the disaster recovery plan is tied to a particular site.

Source: NIST SP 800-34 Rev. 1 (NIST) — Sec. 2.2.7 Information System Contingency Plan

Challenge yourself on this topic → Study as cards