Study. uk . com
  1. Home
  2. All questions
  3. Question 872

CISM study material · question 872 of 1000

Which two outputs does NIST say business impact analysis results feed? Choose two.

  1. The incident response team's staffing model
  2. Contingency planning requirements and priorities
  3. The organisation's continuity, business continuity and disaster recovery strategies
  4. The system's security categorisation
Show the answer

Answer: B. Contingency planning requirements and priorities
C. The organisation's continuity, business continuity and disaster recovery strategies

SP 800-34r1 states business impact analysis results determine contingency planning requirements and priorities and feed into the organisation's continuity of operations, business continuity and disaster recovery strategies.

Source: NIST SP 800-34 Rev. 1 (NIST) — Sec. 3.2 Conduct the Business Impact Analysis

Challenge yourself on this topic → Study as cards