Study. uk . com
  1. Home
  2. All questions
  3. Question 708

CISM study material · question 708 of 1000

Which two decisions does NIST place with the organisation's leadership team during incident response? Choose two.

  1. Authority over high-impact actions such as shutting down or rebuilding critical services
  2. Determining the technical root cause of it all
  3. Preserving the chain of custody for all of the collected evidence
  4. Allocating funding for the response
Show the answer

Answer: D. Allocating funding for the response
A. Authority over high-impact actions such as shutting down or rebuilding critical services

SP 800-61r3 has leadership oversee the response, release the funding, and hold the call on high-impact moves such as taking down or rebuilding a critical service.

Source: NIST SP 800-61 Rev. 3 (NIST) — Sec. 2.2 Roles and Responsibilities — Leadership

Challenge yourself on this topic → Study as cards