NISTNIST CSFRecover FunctionEASYFree question
According to NIST CSF, what should recovery communications include?
- A.Only technical details about system configurations, as restoration priorities are set alphabetically by system name under the CSF
- B.Detailed forensic findings from the incident investigation, on the grounds that the CSF certifies individuals
- C.Only communication with the IT department
- D.Updates on restoration progress, revised timelines, and any changes to service availability
Why D is correct
Recovery communications should include updates on restoration progress, revised timelines for service restoration, and information about changes to service availability to keep stakeholders informed.
Know someone studying for NIST CSF? Send them this one.