Study. uk . com
  1. Home
  2. All questions
  3. Question 956

CISM study material · question 956 of 1000

Which content does NIST say a notification message may carry?

  1. The identity of the threat actor held responsible and the particular attack technique that they had used in order to bring the affected systems down
  2. The alternate site agreement's activation clause
  3. The nature of the disruption, any outage estimate, response details, where and when to convene, and instructions to prepare for relocation
  4. The recovery time objectives of the affected systems
Show the answer

Answer: C. The nature of the disruption, any outage estimate, response details, where and when to convene, and instructions to prepare for relocation

SP 800-34r1 allows a notification to describe the outage, give whatever duration estimate exists, cover response and recovery, say where and when to gather, and tell people to get ready to relocate.

Source: NIST SP 800-34 Rev. 1 (NIST) — Sec. 4.2.2 Notification Procedures

Challenge yourself on this topic → Study as cards