Study. uk . com
  1. Home
  2. All questions
  3. Question 433

CISM study material · question 433 of 1000

Which two things does NIST say a metrics implementation plan should establish? Choose two.

  1. Who is responsible for data collection, analysis and reporting
  2. The retention period for the organisation's audit logs
  3. The disciplinary consequences of failing to supply data
  4. Coordination with other functions so collection is streamlined and non-intrusive
Show the answer

Answer: A. Who is responsible for data collection, analysis and reporting
D. Coordination with other functions so collection is streamlined and non-intrusive

NIST's metrics implementation plan includes roles and responsibilities for collection, analysis and reporting, the tailored process, coordination with other functions to streamline and avoid intruding on operations, tooling and reporting formats.

Source: NIST SP 800-100 (NIST) — Sec. 7.4.1 Prepare for Data Collection

Challenge yourself on this topic → Study as cards