Study. uk . com
  1. Home
  2. All questions
  3. Question 712

CISM study material · question 712 of 1000

Which two review roles does NIST assign to legal experts in incident response? Choose two.

  1. Determining the incident's own severity rating and the urgency with which it will have to be answered
  2. Reviewing contracts with technology suppliers where there are incident response implications
  3. Approving the technical containment strategy that the responders have chosen to apply to each of the affected systems
  4. Reviewing incident response plans, policies and procedures for compliance including privacy rights
Show the answer

Answer: D. Reviewing incident response plans, policies and procedures for compliance including privacy rights
B. Reviewing contracts with technology suppliers where there are incident response implications

SP 800-61r3 has legal check plans, policies and procedures against applicable law, privacy rights included, and look over supplier and third-party contracts where incident response is implicated.

Source: NIST SP 800-61 Rev. 3 (NIST) — Sec. 2.2 Roles and Responsibilities — Legal

Challenge yourself on this topic → Study as cards