Which two duties does SP 800-137 assign to the senior information security officer within continuous monitoring? Choose two.

Answer: A. Consolidating and analysing corrective action plans to determine organisation-wide weaknesses
B. Providing training on the monitoring programme and process

SP 800-137 lists the senior security officer as establishing and maintaining the programme, developing its policy, consolidating and analysing corrective action plans to determine organisational weaknesses, acquiring tools, and providing training on the process.

Source: NIST SP 800-137 (NIST) — Sec. 2.4 Roles and Responsibilities