NISTNIST CSFRecover FunctionEASYFree question
According to NIST CSF, what should recovery communications include?
- A.Mainly technical configuration details, network diagrams, and firewall rule changes made during restoration
- B.Detailed forensic findings, and the specific vulnerability exploited by the attacker
- C.Marketing talking points, competitor comparisons, and pricing changes announced after recovery
- D.Updates on restoration progress, revised timelines, and any changes to service availability
Why D is correct
Recovery communications should include updates on restoration progress, revised timelines for service restoration, and information about changes to service availability to keep stakeholders informed.
Know someone studying for NIST CSF? Send them this one.