Study. uk . com
  1. Home
  2. All questions
  3. Question 386

CISM study material · question 386 of 1000

Which two properties does NIST require of good security measures? Choose two.

  1. They yield numerical and empirical data rather than opinions
  2. They are reported only to the board
  3. They can be obtained without spending extraordinary resources
  4. They are collected by an independent third party that is engaged for the purpose
Show the answer

Answer: A. They yield numerical and empirical data rather than opinions
C. They can be obtained without spending extraordinary resources

NIST lists among the characteristics of good measures that they provide numerical and empirical data rather than opinions, and that they can be obtained without spending extraordinary resources.

Source: NIST SP 800-100 (NIST) — Table 2-1 Measurement and Metrics

Challenge yourself on this topic → Study as cards