Study. uk . com
  1. Home
  2. All questions
  3. Question 869

CISM study material · question 869 of 1000

Which two items does NIST name as key elements of contingency planning policy? Choose two.

  1. The organisation's risk appetite statement
  2. The minimum frequency of backups
  3. The chain-of-custody procedure for evidence
  4. Exercise and testing schedules
Show the answer

Answer: D. Exercise and testing schedules
B. The minimum frequency of backups

SP 800-34r1's policy elements cover who does what, how far the policy reaches, what resources and training are needed, when exercises and tests happen, when the plan is maintained, and how often backups run at minimum.

Source: NIST SP 800-34 Rev. 1 (NIST) — Sec. 3.1 Contingency Planning Policy Statement

Challenge yourself on this topic → Study as cards