Study. uk . com
  1. Home
  2. All questions
  3. Question 949

CISM study material · question 949 of 1000

Which three phases structure an information system contingency plan under NIST?

  1. Assessment, relocation to the alternate site, and then restoration of it
  2. Activation and notification, recovery, and reconstitution
  3. Containment, eradication and then the recovery of the affected system
  4. Preparation, detection and analysis, and then post-incident activity
Show the answer

Answer: B. Activation and notification, recovery, and reconstitution

SP 800-34r1 structures the information system contingency plan in three phases: activation and notification, recovery, and reconstitution.

Source: NIST SP 800-34 Rev. 1 (NIST) — Sec. 4.1 Supporting Information

Challenge yourself on this topic → Study as cards