Study. uk . com
  1. Home
  2. All questions
  3. Question 918

CISM study material · question 918 of 1000

Which role does NIST say a recovery strategy must include, and what decision rests with it?

  1. A single authoritative role with overall decision-making responsibility, including whether to activate the plan
  2. The authorising official for the system, deciding whether the residual risk that remains is acceptable to the organisation
  3. A committee of system owners deciding activation by majority
  4. The incident response team lead, deciding containment strategy
Show the answer

Answer: A. A single authoritative role with overall decision-making responsibility, including whether to activate the plan

SP 800-34r1 states the recovery strategy needs a person or role with overall decision-making responsibility, including the authority to make the decision to activate the plan.

Source: NIST SP 800-34 Rev. 1 (NIST) — Sec. 3.4.6 Roles and Responsibilities

Challenge yourself on this topic → Study as cards