Study. uk . com
  1. Home
  2. All questions
  3. Question 384

CISM study material · question 384 of 1000

Which four things does a plan of action and milestones do for security weaknesses found in programmes and systems?

  1. Identifies, assesses, prioritises and monitors the progress of corrective efforts
  2. Detects, contains, eradicates and recovers
  3. Frames, assesses, responds and monitors
  4. Categorises, selects, implements, assesses and authorises each of the affected systems in turn
Show the answer

Answer: A. Identifies, assesses, prioritises and monitors the progress of corrective efforts

SP 800-100 gives the plan of action and milestones four jobs against weaknesses in programmes and systems: find them, judge them, rank them, and track the fixes through to completion.

Source: NIST SP 800-100 (NIST) — Table 2-1 Plans of Action and Milestones

Challenge yourself on this topic → Study as cards