Study. uk . com
  1. Home
  2. All questions
  3. Question 947

CISM study material · question 947 of 1000

Which material does NIST say should be stored with the contingency plan?

  1. Vendor contracts and service level agreements, software licences, user manuals, security manuals and operating procedures
  2. The organisation's own risk register, its plan of action and milestones, and the residual risk that was accepted for that one system
  3. The results of the last three exercises together with each one of their after-action reports and all of the corrective actions raised
  4. The system security plan and the authorisation package
Show the answer

Answer: A. Vendor contracts and service level agreements, software licences, user manuals, security manuals and operating procedures

SP 800-34r1 states that in addition to the plan itself, other material such as vendor contracts and service level agreements, software licences, system user manuals, security manuals and operating procedures should be stored with it.

Source: NIST SP 800-34 Rev. 1 (NIST) — Sec. 3.6 Plan Maintenance

Challenge yourself on this topic → Study as cards