Study. uk . com
  1. Home
  2. All questions
  3. Question 371

CISM study material · question 371 of 1000

SP 800-39 distinguishes a course of action from a risk response measure. Which pairing is correct?

  1. A course of action combines and phases several response measures; a response measure is one specific act against an identified risk
  2. The two terms are interchangeable
  3. A course of action is strategic; a response measure is always technical
  4. A course of action is a single act; a response measure is a programme of acts
Show the answer

Answer: A. A course of action combines and phases several response measures; a response measure is one specific act against an identified risk

SP 800-39 defines a course of action as a time-phased or situation-dependent combination of risk response measures, and a risk response measure as a specific action taken to respond to an identified risk.

Source: NIST SP 800-39 (NIST) — Sec. 3.3 Responding to Risk

Challenge yourself on this topic → Study as cards