Study. uk . com
  1. Home
  2. All questions
  3. Question 503

CISM study material · question 503 of 1000

Which three things does a security learning programme strategic plan set out, according to NIST?

  1. The course catalogue, the delivery platform and the budget that is allocated to each of them for the coming year
  2. The compliance requirements, the audit schedule and the findings raised at the last inspection of the programme
  3. The current state of learning, the state the organisation needs, and how the gap will be addressed
  4. The threats, the vulnerabilities and the controls
Show the answer

Answer: C. The current state of learning, the state the organisation needs, and how the gap will be addressed

SP 800-50r1 has the strategic plan show three things across the organisation: where learning stands now, where it must get to, and how the distance between them will be closed.

Source: NIST SP 800-50 Rev. 1 (NIST) — Sec. 2.1 Building the Strategic Plan

Challenge yourself on this topic → Study as cards