Your boss believes that your company must follow NIST guidelines for disaster recovery planning and wants you to develop the company$$s plans based on those guidelines. Which statement might you use to respond to your boss?

Question $10$ Answer

a$.$

As a government contractor, we actually have to follow ISO and ITIL, not NIST.

b$.$

Although we are not a government contractor, NIST frameworks and guidelines are mandatory for all US businesses, and so this is correct.

c$.$

NIST publications are mandatory only for government agencies or companies on government contracts, and since we are neither of those, we don$$t have to follow them. But they have some great ideas we should see about putting to use, tailored to our risk management plans.

d$.$

NIST publications are specifically for government agencies and their contractors, and most of what they say is just not applicable to the private sector.