Study. uk . com
  1. Home
  2. All questions
  3. Question 439

CISM study material · question 439 of 1000

A monitoring programme collects large volumes of data but has no defined process for acting on it. How does NIST weigh these two aspects?

  1. Collection is primary; response can be developed later
  2. Response is only required for findings rated high or critical, since lower findings will be absorbed by the next scheduled review
  3. The two are of equal importance and neither can precede the other, so both must be established within the same planning cycle
  4. The strategy for acting on the data collected is as important as, if not more important than, collecting the data
Show the answer

Answer: D. The strategy for acting on the data collected is as important as, if not more important than, collecting the data

SP 800-137 puts the plan for acting on monitoring data on a par with gathering it, if not above it. Volume without a response process buys nothing.

Source: NIST SP 800-137 (NIST) — Ch. 3 The Process

Challenge yourself on this topic → Study as cards