Study. uk . com
  1. Home
  2. All questions
  3. Question 131

CISSP study material · question 131 of 500

A continuity coordinator has interviewed process owners about outage impacts and tolerable downtime. Which two further steps complete the business impact analysis under NIST SP 800-34? Choose two.

  1. Identify the resources recovery of those processes would require.
  2. Select and contract an alternate processing site.
  3. Test the contingency plan with a tabletop exercise.
  4. Establish recovery priorities for the system's resources.
Show the answer

Answer: D. Establish recovery priorities for the system's resources.
A. Identify the resources recovery of those processes would require.

The business impact analysis has three steps: determine processes and recovery criticality, identify resource requirements, then set recovery priorities. Site selection and testing come later in contingency planning.

Source: NIST SP 800-34 Rev. 1 (NIST) — SP 800-34 Rev. 1 > 3.2 Conduct the Business Impact Analysis

Challenge yourself on this topic → Study as cards