nerdexam
(ISC)2

CGRC · Question #584

The ability of an information system to continue to: (i) operate under adverse conditions or stress, even if in a degraded or debilated state, while maintaining essential operational capabilities…

The correct answer is A. Information System Resilience. This definition precisely describes Information System Resilience, which encompasses the system's capacity to maintain essential functions during stress and to rapidly recover to full operational status.

Security and Privacy Governance, Risk Management, and Compliance Program

Question

The ability of an information system to continue to: (i) operate under adverse conditions or stress, even if in a degraded or debilated state, while maintaining essential operational capabilities; and (ii) recover to an effective operational posture in a time frame consistent with mission needs. Response:

Options

  • AInformation System Resilience
  • BInformation System Owner
  • CAuthorizing Official
  • DLarge Scale Integration

How the community answered

(23 responses)
  • A
    91% (21)
  • C
    4% (1)
  • D
    4% (1)

Why each option

This definition precisely describes Information System Resilience, which encompasses the system's capacity to maintain essential functions during stress and to rapidly recover to full operational status.

AInformation System ResilienceCorrect

Information System Resilience is the ability of an information system to withstand adverse conditions or stress, maintain essential operational capabilities even in a degraded state, and recover quickly to an effective operational posture to meet mission requirements. This definition perfectly matches the provided text, emphasizing both continued operation and recovery.

BInformation System Owner

An Information System Owner is a role responsible for a system, not a characteristic of the system itself.

CAuthorizing Official

An Authorizing Official is a role responsible for granting authorization to operate systems, not a system capability.

DLarge Scale Integration

Large Scale Integration refers to combining many components into a single system, which is unrelated to a system's ability to operate under stress and recover.

Concept tested: Definition of information system resilience

Source: https://csrc.nist.gov/glossary/term/information-system-resilience

Topics

#Information System Resilience#System Continuity#Operational Resilience#Disaster Recovery

Community Discussion

No community discussion yet for this question.

Full CGRC Practice