Study. uk . com
  1. Home
  2. All questions
  3. Question 416

CISM study material · question 416 of 1000

NIST groups security metrics by the three questions they answer. Which set is correct?

  1. What happened; why did it happen; what will we do
  2. Am I implementing the tasks I am responsible for; how efficiently or effectively; and what impact are they having on the mission
  3. Who is accountable for the control, who is responsible for operating it from day to day, and who must be informed as soon as it has failed
  4. Are the controls present across the estate, are they configured to the agreed baseline, and are they patched to the current supported release
Show the answer

Answer: B. Am I implementing the tasks I am responsible for; how efficiently or effectively; and what impact are they having on the mission

SP 800-100 frames metrics around three questions: whether the tasks one owns are actually being done, how well or how economically, and what difference they make to the mission.

Source: NIST SP 800-100 (NIST) — Sec. 7.1 Metric Types

Challenge yourself on this topic → Study as cards