CGRC · Question #570
The test plan should evaluate plans that support the IS; such as Incident Response, Disaster Recovery, and _______________ Plan to ensure they are up to date & meet the protection needs of the…
The correct answer is A. Contingency Plan. A Contingency Plan is essential for ensuring an information system's resilience by outlining procedures for backup, recovery, and continued operation during disruptions.
Question
The test plan should evaluate plans that support the IS; such as Incident Response, Disaster Recovery, and _______________ Plan to ensure they are up to date & meet the protection needs of the system Response:
Options
- AContingency Plan
- BSecurity Plan
- CAssessment Plan
- DRemediation plan
How the community answered
(50 responses)- A88% (44)
- B6% (3)
- C4% (2)
- D2% (1)
Why each option
A Contingency Plan is essential for ensuring an information system's resilience by outlining procedures for backup, recovery, and continued operation during disruptions.
A Contingency Plan provides overarching guidance for maintaining or restoring business operations after a disruption, often encompassing or coordinating with Incident Response and Disaster Recovery Plans. It ensures that critical system functions can continue, or be restored promptly, thereby meeting the system's protection and availability needs.
A Security Plan outlines the overall security controls for a system, but the question asks for a specific operational resilience plan alongside Incident Response and Disaster Recovery.
An Assessment Plan details how security controls will be evaluated, rather than how the system will operate during disruptions.
A Remediation plan outlines steps to fix identified vulnerabilities, which is distinct from operational continuity during a disruption.
Concept tested: Contingency planning components
Source: https://csrc.nist.gov/publications/detail/sp/800-34/rev-1/final
Topics
Community Discussion
No community discussion yet for this question.