Study. uk . com
  1. Home
  2. All questions
  3. Question 413

CISM study material · question 413 of 1000

Which two of the four interdependent components of a security performance measurement programme does NIST name? Choose two.

  1. Strong senior management support
  2. An external audit programme run in each year
  3. Practical security policies and procedures
  4. A dedicated measurement team of its own to run the programme
Show the answer

Answer: A. Strong senior management support
C. Practical security policies and procedures

SP 800-100 rests a measurement programme on four legs: backing from senior management, workable policies and procedures, metrics that can be quantified, and analysis aimed at results.

Source: NIST SP 800-100 (NIST) — Ch. 7 Performance Measures

Challenge yourself on this topic → Study as cards