Study. uk . com
  1. Home
  2. All questions
  3. Question 376

CISM study material · question 376 of 1000

An organisation delivers one annual awareness module to everyone including its security engineers and developers. Which CSF 2.0 expectation is unmet?

  1. Awareness completion is tracked centrally and reported to each line manager at the end of every quarter
  2. Individuals in specialised roles receive additional role-specific awareness and training
  3. Personnel receive general awareness training at least once in every twelve-month reporting period thereafter without fail
  4. Awareness content is delivered through more than one channel so that it reaches remote and shift staff
Show the answer

Answer: B. Individuals in specialised roles receive additional role-specific awareness and training

CSF 2.0 splits awareness and training in two: general training so all personnel can perform ordinary tasks with cybersecurity risk in mind, and role-specific training for individuals in specialised roles.

Source: NIST CSWP 29 (NIST) — Appendix A PR.AT

Challenge yourself on this topic → Study as cards