Study. uk . com
  1. Home
  2. All questions
  3. Question 527

CISM study material · question 527 of 1000

Why does NIST say privileged access account holders receive training beyond the all-user programme?

  1. They are required to hold a recognised professional security certification
  2. They deliver training to other staff
  3. They are more often targeted by recruiters
  4. Their access carries greater risk to systems and data
Show the answer

Answer: D. Their access carries greater risk to systems and data

SP 800-50r1 states the second audience group includes privileged access account holders with approved access to restricted systems or data requiring special care, who receive additional training to minimise risks to systems and data.

Source: NIST SP 800-50 Rev. 1 (NIST) — Sec. 2.5 Learning Program Audience Segments

Challenge yourself on this topic → Study as cards