Why is communication important during the recovery phase?
- A.To manage expectations, coordinate restoration activities, and keep stakeholders informed of progress
- B.To recruit additional staff for the recovery effort, as roles and responsibilities under the CSF may only be assigned to full-time security staff
- C.To negotiate with attackers about system restoration, assuming that backups are excluded from Protect
- D.To announce the incident to the media for the first time
Why A is correct
Communication during recovery manages stakeholder expectations, coordinates restoration activities across teams, and provides progress updates to affected parties and management.
Know someone studying for NIST CSF? Send them this one.