Study. uk . com
  1. Home
  2. All questions
  3. Question 886

CISM study material · question 886 of 1000

Which four inputs does NIST say determine system resource recovery priorities, and where does that step sit?

  1. Impact level, system categorisation, budget and staffing levels — taken together as one single step of the system's own risk assessment
  2. Threat likelihood, control strength, asset value and the cost of the recovery work — taken together as the very first step of the whole of the analysis work
  3. Process criticality, outage impacts, tolerable downtime and system resources — the last step of the business impact analysis
  4. Recovery point objective, backup frequency, media type and retention period — taken as one single step of the wider backup design work
Show the answer

Answer: C. Process criticality, outage impacts, tolerable downtime and system resources — the last step of the business impact analysis

SP 800-34r1 makes identifying system resource recovery priorities the final business impact analysis step, developed from process criticality, outage impacts, tolerable downtimes and the system resources involved.

Source: NIST SP 800-34 Rev. 1 (NIST) — Sec. 3.2.3 Identify System Resource Recovery Priorities

Challenge yourself on this topic → Study as cards