Study. uk . com
  1. Home
  2. All questions
  3. Question 344

CISM study material · question 344 of 1000

An organisation subscribes to several external threat feeds and ingests all of them without filtering. Which three qualities does SP 800-30 say should be weighed?

  1. Encryption strength, data integrity and service availability
  2. Timeliness, specificity and relevance
  3. Cost, volume and format
  4. Vendor reputation, contract length and support hours
Show the answer

Answer: B. Timeliness, specificity and relevance

SP 800-30 states organisations using external sources consider the timeliness, specificity and relevance of the threat information rather than accepting it at face value.

Source: NIST SP 800-30 Rev. 1 (NIST) — Task 1-4 Identify Information Sources

Challenge yourself on this topic → Study as cards