Study. uk . com
  1. Home
  2. All questions
  3. Question 867

CISM study material · question 867 of 1000

Where in the system life cycle does NIST place the contingency planning policy and the business impact analysis, and why there?

  1. At the operations and maintenance phase, once the real usage of the system is properly known
  2. At disposal, when the system's own dependencies are best understood by all of the parties involved
  3. At implementation, once the architecture is fixed
  4. Early, before the system is categorised, so that recovery needs shape the design
Show the answer

Answer: D. Early, before the system is categorised, so that recovery needs shape the design

SP 800-34r1 places contingency planning policy and the business impact analysis early in the system development life cycle, before system categorisation, so the recovery requirements they produce influence the system's design.

Source: NIST SP 800-34 Rev. 1 (NIST) — Ch. 3 Contingency Planning Process

Challenge yourself on this topic → Study as cards