Which two sourcing arrangements does NIST recognise for incident handlers, beyond permanent staff? Choose two.

Answer: A. Under contract, such as an outsourced security operations centre
D. Available when needed from a parent organisation, partner or law enforcement agency

SP 800-61r3 states incident handlers might be on staff, on contract such as an outsourced security operations centre or a cloud provider's team, or available when needed from a parent organisation, cybersecurity services provider, business partner or law enforcement agency.

Source: NIST SP 800-61 Rev. 3 (NIST) — Sec. 2.2 Roles and Responsibilities — Incident handlers