Study. uk . com
  1. Home
  2. All questions
  3. Question 528

CISM study material · question 528 of 1000

How does NIST describe the relationship between privileged access holders and those with significant security responsibilities?

  1. The two groups are mutually exclusive by definition
  2. The two groups commonly overlap without being identical, and the latter need an individualised role-based programme
  3. Privileged access holders are a subset of the significant responsibility group, so training the larger group already covers both
  4. The two groups are identical and both receive exactly the same role-based training on exactly the same annual refresher schedule
Show the answer

Answer: B. The two groups commonly overlap without being identical, and the latter need an individualised role-based programme

SP 800-50r1 states the third group includes employees and contractors with significant security or privacy responsibilities requiring an individualised role-based programme, and that there will likely be some overlap with privileged access account holders.

Source: NIST SP 800-50 Rev. 1 (NIST) — Sec. 2.5 Learning Program Audience Segments

Challenge yourself on this topic → Study as cards