Study. uk . com
  1. Home
  2. All questions
  3. Question 429

CISM study material · question 429 of 1000

Which two corrective actions does NIST name in response to a measured performance gap? Choose two.

  1. Establishing new processes and procedures
  2. Changing the system architecture
  3. Reducing the target so current performance meets it
  4. Withdrawing the metric from the programme
Show the answer

Answer: B. Changing the system architecture
A. Establishing new processes and procedures

SP 800-100's corrective options run from reconfiguring systems and training people to buying tools, reworking the architecture, standing up new processes and procedures, and revising policy.

Source: NIST SP 800-100 (NIST) — Sec. 7.4.3 Identify Corrective Actions

Challenge yourself on this topic → Study as cards