Comprehensive and Detailed Explanation From Exact Extract:
Relaxing password policies during disaster recovery often leads to increased risk (C) by weakening authentication controls and potentially allowing unauthorized access.
Recovery Point Objective (RPO) (A) relates to data loss tolerance and is unlikely directly affected by password policies.
Recovery Time Objective (RTO) (B) relates to restoration speed, and while relaxed policies may speed access, this is outweighed by security risk.
Reduced insurance needs (D) is not a direct consequence of relaxed security policies.
GICSP stresses that even during emergencies, security controls should be maintained to prevent additional vulnerabilities.
[Reference:, , GICSP Official Study Guide, Domain: ICS Security Operations & Incident Response, , NIST SP 800-34 Rev 1 (Contingency Planning), , GICSP Training on Disaster Recovery and Security Risk Management, ]
Submit