Study. uk . com
  1. Home
  2. All questions
  3. Question 613

CISM study material · question 613 of 1000

How does NIST require a user's acceptance of the rules of behaviour to be recorded?

  1. Through inclusion of the rules of behaviour in the employment contract, so that acceptance of them is implied by the act of taking up the post
  2. Through completion of the annual awareness module, whose completion record in the learning management system then stands as the user's acceptance of the rules
  3. Through a note placed in the user's personnel file by their line manager once the rules have been read out and discussed with them in person
  4. Through a signature page acknowledging they have read, understood and agreed to the rules; an electronic signature is acceptable
Show the answer

Answer: D. Through a signature page acknowledging they have read, understood and agreed to the rules; an electronic signature is acceptable

SP 800-100 requires a signature page on which each user acknowledges receipt and confirms they have read the rules, understood them and will abide by them; signing electronically is allowed.

Source: NIST SP 800-100 (NIST) — Sec. 8.3 Rules of Behavior

Challenge yourself on this topic → Study as cards