Study. uk . com
  1. Home
  2. All questions
  3. Question 518

CISM study material · question 518 of 1000

Which risks does NIST ask a learning programme manager to identify and manage, beyond the risks the programme teaches about?

  1. The risks of employees sharing the course material externally, where its content would reveal how the organisation defends itself at present
  2. The risks of the training vendor going out of business
  3. The security and privacy risks of processing the learning data itself, including in the learning management system and reporting
  4. The risks of over-training the workforce
Show the answer

Answer: C. The security and privacy risks of processing the learning data itself, including in the learning management system and reporting

SP 800-50r1 makes the programme manager responsible for the risks in handling learning data itself — those arising in the learning management system and in how results are reported.

Source: NIST SP 800-50 Rev. 1 (NIST) — Sec. 2.4.1 Measurements

Challenge yourself on this topic → Study as cards