Study. uk . com
  1. Home
  2. All questions
  3. Question 887

CISM study material · question 887 of 1000

Where an outage can be prevented feasibly and cost-effectively, which does NIST prefer?

  1. Both applied equally, to provide defence in depth
  2. The recovery action, because it is proven under test
  3. Whichever the system owner selects
  4. The preventive measure, because preventing an outage costs less than recovering from one
Show the answer

Answer: D. The preventive measure, because preventing an outage costs less than recovering from one

SP 800-34r1 states measures to prevent or reduce the effects of system disruption are preferable to actions needed to recover the system after a disruption, where they are feasible and cost-effective.

Source: NIST SP 800-34 Rev. 1 (NIST) — Sec. 3.3 Identify Preventive Controls

Challenge yourself on this topic → Study as cards