Study. uk . com
  1. Home
  2. All questions
  3. Question 406

CISM study material · question 406 of 1000

Business unit managers are surprised to receive a charge for the new awareness programme. Which implementation step did NIST expect?

  1. Obtaining written consent from each business unit
  2. Deferring the programme until central funding is secured, so that no business unit is asked to carry any part of the cost
  3. Charging the cost to the training department by default, since it already holds the budget for all staff development work
  4. Explaining the funding arrangement, including whether the central budget carries the cost or units bear a share
Show the answer

Answer: D. Explaining the funding arrangement, including whether the central budget carries the cost or units bear a share

NIST states funding issues must be addressed at implementation, giving the example that managers must know whether the cost will be funded entirely by the central information officer or security budget, or whether their own budgets will be affected.

Source: NIST SP 800-100 (NIST) — Sec. 4.3.3 Implementing

Challenge yourself on this topic → Study as cards