Study. uk . com
  1. Home
  2. All questions
  3. Question 690

CISM study material · question 690 of 1000

Which pairing correctly matches metric level to the kind of decision it supports?

  1. System-level metrics such as third-party access frequency support tactical decisions; programme-level metrics such as cost per incident support strategic ones
  2. Both of the two levels support only compliance reporting, since neither of them produces a figure that is precise enough for any manager to act on directly at either tier
  3. Both levels support only tactical decisions
  4. System-level metrics such as the number of open ports support strategic decisions, while programme-level metrics such as the cost per incident support the tactical ones
Show the answer

Answer: A. System-level metrics such as third-party access frequency support tactical decisions; programme-level metrics such as cost per incident support strategic ones

SP 800-55v1 states system-level metrics such as the frequency of third-party access or the number of open ports facilitate tactical decision-making, while programme-level metrics such as the number of incidents or cost per incident help with strategic decisions.

Source: NIST SP 800-55 Vol. 1 (NIST) — Sec. 2.4 Metrics

Challenge yourself on this topic → Study as cards