- Home
- All questions
- Question 709
CISM study material · question 709 of 1000
Which two duties does NIST assign to incident handlers? Choose two.
Show the answer
Answer: B. Verifying that an incident has occurred and collecting and analysing evidence
A. Prioritising response activities and acting to limit damage
SP 800-61r3 gives handlers the work of confirming an incident happened, gathering and examining data and evidence, deciding what gets done first, and acting to hold damage down while causes are found and operations restored.
Source: NIST SP 800-61 Rev. 3 (NIST) — Sec. 2.2 Roles and Responsibilities — Incident handlers