Study. uk . com
  1. Home
  2. All questions
  3. Question 942

CISM study material · question 942 of 1000

To which organisational process does NIST tie contingency plan maintenance?

  1. The change management process, so plan review is triggered by system change
  2. The risk assessment cycle, so that a review is triggered by a change in the threat picture
  3. The annual audit cycle, so that a review is triggered by the assessment findings raised
  4. The budgeting cycle, so that a review is triggered by the funding decisions that are taken in it
Show the answer

Answer: A. The change management process, so plan review is triggered by system change

SP 800-34r1 states contingency plans should be reviewed and updated as part of the organisation's change management process, tying plan maintenance to system change rather than leaving it standalone.

Source: NIST SP 800-34 Rev. 1 (NIST) — Sec. 3.6 Plan Maintenance

Challenge yourself on this topic → Study as cards