Which two channels does SP 800-39 name for exchanging threat and vulnerability information with parties outside the organisation? Choose two.

Answer: A. Information sharing and analysis centres
C. Computer emergency response teams

SP 800-39 names information sharing and analysis centres and computer emergency response teams as examples of entities with which organisations establish practices for sharing risk-related threat and vulnerability information.

Source: NIST SP 800-39 (NIST) — Sec. 2.1 Components of Risk Management