Study. uk . com
  1. Home
  2. All questions
  3. Question 422

CISM study material · question 422 of 1000

Which two attributes does NIST require of a metric chosen for initial implementation? Choose two.

  1. It uses data realistically obtainable from existing processes and repositories
  2. It measures a process that already exists and is relatively stable
  3. It can be reported without human interpretation
  4. It has been benchmarked against peer organisations
Show the answer

Answer: A. It uses data realistically obtainable from existing processes and repositories
B. It measures a process that already exists and is relatively stable

NIST states the initial set should facilitate improvement of high-priority controls, use data realistically obtainable from existing processes and data repositories, and measure processes that already exist and are relatively stable.

Source: NIST SP 800-100 (NIST) — Sec. 7.3 Metrics Development Process

Challenge yourself on this topic → Study as cards