Study. uk . com
  1. Home
  2. All questions
  3. Question 923

CISM study material · question 923 of 1000

Which two external points of contact should a business impact analysis draw on? Choose two.

  1. Organisations that exchange data with the system
  2. The system's commercial hardware vendors
  3. The organisation's external auditors
  4. The owners of interconnected systems
Show the answer

Answer: A. Organisations that exchange data with the system
D. The owners of interconnected systems

SP 800-34r1 states the business impact analysis should identify internal and external points of contact associated with the system, including organisations that exchange data with it and the owners of interconnected systems.

Source: NIST SP 800-34 Rev. 1 (NIST) — Sec. 3.2.1 Determine Business Processes and Recovery Criticality

Challenge yourself on this topic → Study as cards