Which of the following is a key objective of recovery planning in the NIST CSF?
- A.Closing the incident ticket and archiving the documentation the same afternoon the last affected production system comes back online for users
- B.Ensuring that recovery activities are executed in a timely manner to restore normal operations and reduce the impact of the incident
- C.Requiring senior management to personally supervise each phase of restoration and approve each completed milestone before the next phase begins
- D.Documenting recovery steps in a shared spreadsheet and updating it after each incident review meeting during the following work week
Why B is correct
Recovery planning ensures that organizations can restore normal operations in a timely manner following an incident, reducing the overall impact on business operations, reputation, and stakeholders.
Know someone studying for NIST CSF? Send them this one.