Study. uk . com
  1. Home
  2. All questions
  3. Question 971

CISM study material · question 971 of 1000

Which activities does NIST include in deactivating the contingency plan?

  1. Notifying each of the external partners and all the interconnected system owners that normal service has now been fully resumed at the primary site
  2. Archiving the evidence and closing the incident record
  3. Declaring the end of the recovery phase, preparing the after-action report and circulating all of its lessons learned to each of the recovery teams
  4. Dismantling temporary recovery locations, restocking supplies, returning documentation and readying the system for the next contingency
Show the answer

Answer: D. Dismantling temporary recovery locations, restocking supplies, returning documentation and readying the system for the next contingency

SP 800-34r1 includes cleanup in plan deactivation: dismantling any temporary recovery locations, restocking supplies, returning manuals and other documentation to their original location, and preparing the system for the next contingency event.

Source: NIST SP 800-34 Rev. 1 (NIST) — Sec. 4.4 Reconstitution Phase

Challenge yourself on this topic → Study as cards