Study. uk . com
  1. Home
  2. All questions
  3. Question 960

CISM study material · question 960 of 1000

What does NIST say may happen to notifications once outage assessment reveals the true impact?

  1. They are reissued only if the plan is escalated
  2. They are handed to the crisis communications team
  3. They are closed out and replaced by recovery status reports
  4. They may be revisited and widened, so the first notification is not necessarily the last
Show the answer

Answer: D. They may be revisited and widened, so the first notification is not necessarily the last

SP 800-34r1 notes that when the outage assessment establishes the impact, notifications may need to be revisited and expanded — the initial notification is not necessarily the final one.

Source: NIST SP 800-34 Rev. 1 (NIST) — Sec. 4.2.3 Outage Assessment

Challenge yourself on this topic → Study as cards