Study. uk . com
  1. Home
  2. All questions
  3. Question 409

CISM study material · question 409 of 1000

Tracking shows a gap between recorded training status and the organisation's standard. Which three follow-up actions does NIST name?

  1. Reduction of the standard to match the actual performance, so that the recorded gap closes without any further effort
  2. Formal reminders to management, additional offerings, or a corrective plan with scheduled completion dates
  3. Referral of the gap to the external auditor
  4. Immediate suspension of the affected user accounts
Show the answer

Answer: B. Formal reminders to management, additional offerings, or a corrective plan with scheduled completion dates

SP 800-100 offers three routes when tracking shows a shortfall: remind management formally, put on more awareness, training or education, or agree a corrective plan with dates against it.

Source: NIST SP 800-100 (NIST) — Sec. 4.4.1 Monitoring Compliance

Challenge yourself on this topic → Study as cards