Study. uk . com
  1. Home
  2. All questions
  3. Question 952

CISM study material · question 952 of 1000

Which range must notification procedures cover, per NIST?

  1. Both outages that come with warning, such as a forecast hurricane, and those that come with none, such as equipment failure
  2. Only those outages that arise from deliberately malicious activity directed against the organisation's own estate and all its systems
  3. Only those outages that are severe enough to require a full relocation of the affected service to the organisation's own alternate site
  4. Only those outages that affect the systems which have already been categorised as either moderate impact or high impact by the organisation's own analysis
Show the answer

Answer: A. Both outages that come with warning, such as a forecast hurricane, and those that come with none, such as equipment failure

SP 800-34r1 states notification procedures should be documented for both types of disruption — those with prior warning, such as a hurricane forecast, and those with no warning, such as equipment failure or a criminal act.

Source: NIST SP 800-34 Rev. 1 (NIST) — Sec. 4.2.2 Notification Procedures

Challenge yourself on this topic → Study as cards