Study. uk . com
  1. Home
  2. All questions
  3. Question 136

CISSP study material · question 136 of 500

A coordinator beginning a business impact analysis asks which existing artefact gives the starting point for judging outage consequences. Under NIST SP 800-34, what is it?

  1. The system's FIPS 199 availability impact level.
  2. The most recent penetration test report.
  3. The organisation's risk tolerance statement.
  4. The system's confidentiality impact level under FIPS 199.
Show the answer

Answer: A. The system's FIPS 199 availability impact level.

SP 800-34 makes the FIPS 199 category for the availability security objective the basis of the business impact analysis, with further process analysis layered on top.

Source: NIST SP 800-34 Rev. 1 (NIST) — SP 800-34 Rev. 1 > 3.2.1 Determine Business Processes and Recovery Criticality

Challenge yourself on this topic → Study as cards