Study. uk . com
  1. Home
  2. All questions
  3. Question 945

CISM study material · question 945 of 1000

Why does NIST require the distribution of a contingency plan to be marked and controlled, with a record of holders?

  1. Because the plan contains sensitive operational and personnel information
  2. Because the plan must be produced for audit on demand
  3. Because the plan carries the authorising official's signature
  4. Because the plan is subject to records retention requirements
Show the answer

Answer: A. Because the plan contains sensitive operational and personnel information

SP 800-34r1 treats the plan as holding operational and personnel detail that is potentially sensitive, so copies are marked and their distribution controlled, with the coordinator noting who holds each.

Source: NIST SP 800-34 Rev. 1 (NIST) — Sec. 3.6 Plan Maintenance

Challenge yourself on this topic → Study as cards