Study. uk . com
  1. Home
  2. All questions
  3. Question 860

CISM study material · question 860 of 1000

Which two items does an information system contingency plan carry, according to NIST? Choose two.

  1. The organisation's risk appetite statement
  2. Detailed recovery procedures and system testing
  3. The crisis communications templates
  4. Inventory information and assessment procedures
Show the answer

Answer: D. Inventory information and assessment procedures
B. Detailed recovery procedures and system testing

SP 800-34r1 packs into this plan what recovery actually needs: who does what, the inventory, how assessment is done, step-by-step recovery, and how the system is tested.

Source: NIST SP 800-34 Rev. 1 (NIST) — Sec. 2.2.7 Information System Contingency Plan

Challenge yourself on this topic → Study as cards