Study. uk . com
  1. Home
  2. All questions
  3. Question 970

CISM study material · question 970 of 1000

Which judgement does NIST require after reconstitution?

  1. Whether the plan should be escalated to a higher impact level
  2. Whether the system changed enough to require reassessment and reauthorisation — a new hardware platform or facility being examples
  3. Whether the recovery time objective was met
  4. Whether the alternate site agreement should be renewed
Show the answer

Answer: B. Whether the system changed enough to require reassessment and reauthorisation — a new hardware platform or facility being examples

SP 800-34r1 states that after reconstitution, those accountable must determine whether the system has changed sufficiently to require reassessment and reauthorisation, citing a new hardware platform or a new facility as examples.

Source: NIST SP 800-34 Rev. 1 (NIST) — Sec. 4.4 Reconstitution Phase

Challenge yourself on this topic → Study as cards