Study. uk . com
  1. Home
  2. All questions
  3. Question 324

CISM study material · question 324 of 1000

A mitigation cannot be implemented immediately because the necessary resources are unavailable. Which two things does IR 8286 say the corrective action plan records? Choose two.

  1. The insurance cover applying in the interim
  2. The disciplinary consequences of further delay
  3. The resources required to accomplish the plan's elements
  4. The milestones and scheduled completion dates
Show the answer

Answer: C. The resources required to accomplish the plan's elements
D. The milestones and scheduled completion dates

IR 8286 describes a plan of action and milestones as identifying tasks to be accomplished, the resources required, milestones in meeting those tasks, and scheduled completion dates, including for actions that cannot be implemented immediately.

Source: NIST IR 8286 (NIST) — Sec. 3.5.2 Responding to Residual Risk

Challenge yourself on this topic → Study as cards