Study. uk . com
  1. Home
  2. All questions
  3. Question 973

CISM study material · question 973 of 1000

What must escalation procedures define, per NIST's recovery guidance?

  1. The events, thresholds or triggers calling for more recovery staff, status updates to leadership, or additional resources
  2. The order of succession for the activation authority
  3. The severity classification scheme for disruptions
  4. The reporting line running from each one of the recovery teams up to the plan coordinator over the course of the whole of the response
Show the answer

Answer: A. The events, thresholds or triggers calling for more recovery staff, status updates to leadership, or additional resources

SP 800-34r1 asks escalation procedures to name the events, thresholds or triggers that call for more recovery staff, an update to leadership, or extra resources.

Source: NIST SP 800-34 Rev. 1 (NIST) — Sec. 4.3.3 Recovery Escalation and Notification

Challenge yourself on this topic → Study as cards