Which two organisational changes following technical training does NIST offer as measurements? Choose two.

Answer: A. A reduction in the number of accounts holding privileged access
C. New controls appearing in acquisition and budget documentation

SP 800-50r1 counts organisational shifts as evidence: fewer privileged accounts, high-value assets identified, networks newly segmented, or extra controls written into acquisition and budget papers.

Source: NIST SP 800-50 Rev. 1 (NIST) — Sec. 2.4.1.1 Quantitative Measurements