Study. uk . com
  1. Home
  2. All questions
  3. Question 709

CISM study material · question 709 of 1000

Which two duties does NIST assign to incident handlers? Choose two.

  1. Prioritising response activities and acting to limit damage
  2. Verifying that an incident has occurred and collecting and analysing evidence
  3. Authorising the notification of the applicable regulator once all of the relevant facts are known
  4. Approving the budget for the response
Show the answer

Answer: B. Verifying that an incident has occurred and collecting and analysing evidence
A. Prioritising response activities and acting to limit damage

SP 800-61r3 gives handlers the work of confirming an incident happened, gathering and examining data and evidence, deciding what gets done first, and acting to hold damage down while causes are found and operations restored.

Source: NIST SP 800-61 Rev. 3 (NIST) — Sec. 2.2 Roles and Responsibilities — Incident handlers

Challenge yourself on this topic → Study as cards