Study. uk . com
  1. Home
  2. All questions
  3. Question 882

CISM study material · question 882 of 1000

The achievable recovery time objective exceeds a maximum tolerable downtime that cannot be relaxed. What does NIST direct?

  1. Raise the maximum tolerable downtime to match what is actually achievable in practice
  2. Accept the risk formally and stop planning further
  3. Escalate the system to a higher impact level
  4. Record the gap in a plan of action and milestones and plan its mitigation
Show the answer

Answer: D. Record the gap in a plan of action and milestones and plan its mitigation

SP 800-34r1 directs that where the recovery time objective cannot be met and the maximum tolerable downtime is inflexible, a plan of action and milestones should document the situation and plan for mitigation.

Source: NIST SP 800-34 Rev. 1 (NIST) — Sec. 3.2.1 Determine Business Processes and Recovery Criticality

Challenge yourself on this topic → Study as cards