Systems Security Certified Practitioner – SSCP – Question0626 - Systems Security Certified Practitioner

Which of the following questions is less likely to help in assessing an organization's contingency planning controls?

A. Is damaged media stored and/or destroyed?
B. Are the backup storage site and alternate site geographically far enough from the primary site?
C. Is there an up-to-date copy of the plan stored securely off-site?
D. Is the location of stored backups identified?

Correct Answer: A

Explanation:

Contingency planning involves more than planning for a move offsite after a disaster destroys a facility.
It also addresses how to keep an organization’s critical functions operating in the event of disruptions, large and small.
Handling of damaged media is an operational task related to regular production and is not specific to contingency planning. Source: SWANSON, Marianne, NIST Special Publication 800-26, Security Self-Assessment Guide for Information Technology Systems, November 2001 (Pages A-27 to A-28).