Study. uk . com
  1. Home
  2. All questions
  3. Question 880

CISM study material · question 880 of 1000

Why does NIST expect recovery time objective to be shorter than maximum tolerable downtime?

  1. Because reprocessing data after recovery still consumes tolerable downtime
  2. Because the maximum tolerable downtime includes the testing period
  3. Because the recovery time objective excludes the notification phase that precedes it
  4. Because the two are measured from different starting points
Show the answer

Answer: A. Because reprocessing data after recovery still consumes tolerable downtime

SP 800-34r1 explains that recovery time objective must ensure the maximum tolerable downtime is not exceeded, and normally must be shorter, because time spent reprocessing data once the system is recovered still counts against the tolerable downtime.

Source: NIST SP 800-34 Rev. 1 (NIST) — Sec. 3.2.1 Determine Business Processes and Recovery Criticality

Challenge yourself on this topic → Study as cards