Study. uk . com
  1. Home
  2. All questions
  3. Question 515

CISM study material · question 515 of 1000

A review finds several learning activities that cannot be traced to any stated objective or goal. What does NIST say about such activities?

  1. Traceability is required only for activities that carry a cost
  2. Untraceable activities should be retained for one further cycle and then reviewed, since their value may become apparent once the results are in
  3. Untraceable activities are acceptable where they prove popular with the staff, because engagement is itself an outcome that is worth protecting
  4. Every item down to the most detailed tactic should trace back to the strategy, so an activity that traces to nothing does not belong
Show the answer

Answer: D. Every item down to the most detailed tactic should trace back to the strategy, so an activity that traces to nothing does not belong

SP 800-50r1 expects a chain from the strategy down to the smallest tactical item, with every activity supporting that strategy. An activity tracing nowhere has no claim to be in the plan.

Source: NIST SP 800-50 Rev. 1 (NIST) — Sec. 2.3 Aligning Strategies, Goals, Objectives, Tactics

Challenge yourself on this topic → Study as cards