Study. uk . com
  1. Home
  2. All questions
  3. Question 868

CISM study material · question 868 of 1000

Which two things does a contingency planning policy statement establish, and what does NIST say it needs to succeed?

  1. The organisation's contingency objectives and the framework and responsibilities for planning — needing senior management backing
  2. The incident categories and severity levels — needing legal review
  3. The backup schedule and media rotation — needing operations sign-off
  4. The recovery time objectives and the alternate site strategy — needing budget approval
Show the answer

Answer: A. The organisation's contingency objectives and the framework and responsibilities for planning — needing senior management backing

SP 800-34r1 states the contingency planning policy statement defines the organisation's overall contingency objectives and establishes the organisational framework and responsibilities for planning, and that senior management buy-in is needed for it to be effective.

Source: NIST SP 800-34 Rev. 1 (NIST) — Sec. 3.1 Contingency Planning Policy Statement

Challenge yourself on this topic → Study as cards