Study. uk . com
  1. Home
  2. All questions
  3. Question 405

CISM study material · question 405 of 1000

Which two items does NIST say must be complete before implementation of an awareness and training programme begins? Choose two.

  1. The awareness and training material itself
  2. A signed attendance record for all staff
  3. A needs assessment
  4. An external accreditation of the programme
Show the answer

Answer: C. A needs assessment
A. The awareness and training material itself

SP 800-100 gates implementation on four completed pieces: the needs assessment, the strategy, a plan for carrying that strategy out, and the material itself.

Source: NIST SP 800-100 (NIST) — Sec. 4.3.3 Implementing

Challenge yourself on this topic → Study as cards