Study. uk . com
  1. Home
  2. All questions
  3. Question 419

CISM study material · question 419 of 1000

Why does NIST describe mission impact metrics as the hardest to generate?

  1. They can only be produced by external assessors
  2. They require data the organisation is prohibited from collecting
  3. They must validate that the activity delivered the expected benefit, not merely that it was performed
  4. They require quantitative rather than qualitative data
Show the answer

Answer: C. They must validate that the activity delivered the expected benefit, not merely that it was performed

SP 800-100 rates impact metrics hardest because full implementation is only the starting point — managers then have to show the activity is returning the benefit the mission was promised.

Source: NIST SP 800-100 (NIST) — Sec. 7.1 Metric Types

Challenge yourself on this topic → Study as cards