What is the Communications category (RC.CO) within the CSF 1.1 Recover function concerned with?
- A.Broadcasting mass alerts to the general public and regional media outlets, since public awareness is treated as the organization's primary recovery communication objective
- B.Communicating updated security policies to new hires and outside contractors, as onboarding material doubles as the organization's recovery communication plan
- C.Sending promotional discounts to retained customers and prospects, so marketing treats the breach as a sales opportunity
- D.Coordinating restoration activities with internal and external parties, such as coordinating centers, ISPs, owners of attacking systems, victims, and vendors
Why D is correct
Recovery Communications (RC.CO) addresses coordinating restoration activities and sharing information during recovery with internal and external parties including coordinating centers, ISPs, and other stakeholders.
Know someone studying for NIST CSF? Send them this one.