Study. uk . com
  1. Home
  2. All questions
  3. Question 950

CISM study material · question 950 of 1000

Which criterion does NIST include among the bases for activating a contingency plan?

  1. Whether the incident has been publicly disclosed
  2. Whether the incident response team has already completed its containment of the incident
  3. Whether the alternate site has spare capacity
  4. Whether the outage is expected to run longer than the recovery time objective
Show the answer

Answer: D. Whether the outage is expected to run longer than the recovery time objective

SP 800-34r1 states activation criteria may be based on the extent of any damage to the system, the criticality of the system to the mission, and the expected duration of the outage lasting longer than the recovery time objective.

Source: NIST SP 800-34 Rev. 1 (NIST) — Sec. 4.2.1 Activation Criteria and Procedure

Challenge yourself on this topic → Study as cards