Study. uk . com
  1. Home
  2. All questions
  3. Question 428

CISM study material · question 428 of 1000

Which three activities does NIST include in analysing security measurement data?

  1. Collection, storage and archiving of the raw data
  2. Categorisation, authorisation and monitoring of each system
  3. Selection, weighting and reporting of the metrics
  4. Gap analysis against defined targets, identifying causes of poor performance, and naming areas requiring improvement
Show the answer

Answer: D. Gap analysis against defined targets, identifying causes of poor performance, and naming areas requiring improvement

NIST's collect and analyse phase includes conducting gap analysis by comparing collected measurements with defined targets, identifying causes of poor performance, and identifying areas requiring improvement.

Source: NIST SP 800-100 (NIST) — Sec. 7.4.2 Collect Data and Analyze Results

Challenge yourself on this topic → Study as cards