Study. uk . com
  1. Home
  2. All questions
  3. Question 97

CompTIA Security+ study material · question 97 of 611

A continuity plan written three years ago has never been exercised. What is the most likely problem with it now?

  1. Its recovery objectives are too aggressive
  2. It has been superseded by the incident response plan
  3. Staff, systems and contacts in it have changed and it no longer matches reality
  4. It cannot be used without an external auditor's sign-off
Show the answer

Answer: C. Staff, systems and contacts in it have changed and it no longer matches reality

Plans decay quietly as the organisation changes. Exercising is what keeps the document connected to the real environment.

Source: NIST SP 800-34 Rev. 1 (NIST) — SP 800-34 Rev. 1 § 3.5 Plan Testing, Training, and Exercises

Challenge yourself on this topic → Study as cards