Study. uk . com
  1. Home
  2. All questions
  3. Question 544

CISM study material · question 544 of 1000

A decision to outsource a security service is taken purely on cost. Which two consequences does NIST warn may follow? Choose two.

  1. Automatic breach of the organisation's security policy
  2. Loss of the ability to measure performance
  3. Loss of intellectual capital
  4. Loss of employee morale and attrition
Show the answer

Answer: D. Loss of employee morale and attrition
C. Loss of intellectual capital

SP 800-100 warns a single-issue decision reaches further than expected: near-term cost and value have to be set against longer-term losses of morale, of staff, and of intellectual capital.

Source: NIST SP 800-100 (NIST) — Sec. 12.2.2 Information Security Services Issues

Challenge yourself on this topic → Study as cards