Study. uk . com
  1. Home
  2. All questions
  3. Question 891

CISM study material · question 891 of 1000

On what does NIST say the minimum frequency and scope of backups should be based?

  1. The recovery time objective that has been set for the system that it directly supports
  2. The retention period required by regulation
  3. How critical the data is and how frequently new information is introduced
  4. The capacity of the backup media and the length of the backup window that is available
Show the answer

Answer: C. How critical the data is and how frequently new information is introduced

SP 800-34r1 derives backup frequency from how critical the data is and how often fresh information arrives, and has the policy set the scope of what is captured alongside it.

Source: NIST SP 800-34 Rev. 1 (NIST) — Sec. 3.4.2 Backup Methods and Offsite Storage

Challenge yourself on this topic → Study as cards