Study. uk . com
  1. Home
  2. All questions
  3. Question 38

CISM study material · question 38 of 1000

The security strategy is reviewed annually by calendar. Which two circumstances does NIST say should also trigger a revisit before the next annual review? Choose two.

  1. A change in applicable legislation or regulation
  2. A change in the organisation's mission priorities
  3. Rotation of the security operations centre roster
  4. Completion of the annual awareness training cycle
Show the answer

Answer: A. A change in applicable legislation or regulation
B. A change in the organisation's mission priorities

SP 800-100 names three triggers for revisiting the security strategy: changes in legislation, regulations or directives; changes in mission priorities; and emerging issues such as new threats or new technologies.

Source: NIST SP 800-100 (NIST) — Sec. 2.2.1 Strategic Planning

Challenge yourself on this topic → Study as cards