CGRC Exam Question 21
A predetermined set of instructions or procedures that describe how an organization's mission essential functions will be sustained within 12 hours and for up to 30 days as a result of a disaster event before returning to normal operations.
Response:
Response:
CGRC Exam Question 22
Which of the following NIST documents defines impact?
Response:
Response:
CGRC Exam Question 23
The process by which a security control baseline is modified based on: (i) the application of scoping guidance; (ii) the specification of compensating security controls, if needed; and (iii) the specification of organization-defined parameters in the security controls via explicit assignment and selection statements.
Response:
Response:
CGRC Exam Question 24
An analysis of an information system's requirements, functions, and interdependencies used to characterize system contingency requirements and priorities in the event of a significant disruption.
Response:
Response:
CGRC Exam Question 25
Which of the following is the acronym of RTM?
Response:
Response:
