Study. uk . com
  1. Home
  2. All questions
  3. Question 864

CISM study material · question 864 of 1000

An attack spreads beyond the systems the response team first contained. Which relationship does NIST describe?

  1. The disaster recovery plan supersedes the cyber incident response plan once the spread has been fully confirmed here
  2. The cyber incident response plan may itself activate a system contingency plan or a disaster recovery plan
  3. The occupant emergency plan is activated instead, since the spread of an attack is treated as a facility-wide event too
  4. The cyber incident response plan is closed down entirely and the continuity of operations plan is then opened up in its place instead
Show the answer

Answer: B. The cyber incident response plan may itself activate a system contingency plan or a disaster recovery plan

SP 800-34r1's plan table notes the cyber incident response plan may activate an information system contingency plan or a disaster recovery plan depending on the extent of the attack.

Source: NIST SP 800-34 Rev. 1 (NIST) — Table 2-2 Type of Plans

Challenge yourself on this topic → Study as cards