Study. uk . com
  1. Home
  2. All questions
  3. Question 530

CISM study material · question 530 of 1000

An employee completes the general awareness module but does not know the specific rules governing the application they use daily. Which managerial duty does NIST identify?

  1. Ensuring personnel understand the specific rules of each system and application they use
  2. Referring the gap to the learning programme manager so that the policy itself can be changed centrally for everyone
  3. Restricting the employee's access to the application until a suitable certification has been obtained
  4. Enrolling the employee in role-based training regardless of whether their role actually calls for it
Show the answer

Answer: A. Ensuring personnel understand the specific rules of each system and application they use

SP 800-50r1 makes managers answerable for their people knowing the particular rules attached to each system and application in use, on top of keeping competence current through the learning programme.

Source: NIST SP 800-50 Rev. 1 (NIST) — Sec. 1.6.4 Managers

Challenge yourself on this topic → Study as cards