NISTNIST CSFRecover FunctionEASYFree question
Why is it important to regularly test recovery plans?
- A.To satisfy the auditors and release the budget since the plan has to be reviewed once each year
- B.To train new hires on the daily helpdesk tasks and onboarding forms since they handle first-line calls
- C.To document that testing occurred once and avoid revisiting the plan as procedures change over time
- D.To verify that plans work as expected and identify gaps before a real incident occurs
Why D is correct
Regular testing verifies that recovery plans work as expected, identifies gaps or outdated procedures, and ensures the team is prepared to execute the plan effectively during a real incident.
Know someone studying for NIST CSF? Send them this one.