Study. uk . com
  1. Home
  2. All questions
  3. Question 135

CISSP study material · question 135 of 500

A continuity coordinator finds the achievable recovery time objective is twelve hours while the maximum tolerable downtime, fixed by regulation, is six. Management will not fund a faster solution this year. What does NIST SP 800-34 direct?

  1. Raise a plan of action and milestones documenting the gap and the plan to mitigate it.
  2. Raise the maximum tolerable downtime to twelve hours so the two agree.
  3. Reclassify the system to a lower impact level until funding is available.
  4. Record the shortfall as accepted residual risk and take no further action.
Show the answer

Answer: A. Raise a plan of action and milestones documenting the gap and the plan to mitigate it.

Where the objective cannot be met immediately and the tolerable downtime is inflexible, SP 800-34 says to initiate a plan of action and milestones documenting the situation and its mitigation.

Source: NIST SP 800-34 Rev. 1 (NIST) — SP 800-34 Rev. 1 > 3.2.1 Determine Business Processes and Recovery Criticality

Challenge yourself on this topic → Study as cards