Which two ways does NIST say human resources is an incident response stakeholder? Choose two.

Answer: A. Through pre-employment screening, onboarding, offboarding and position changes
B. Where an employee is suspected of intentionally causing an incident

SP 800-61r3 pulls human resources in twice: cybersecurity risk shapes screening, onboarding, offboarding and role changes, and HR is involved where an employee is suspected of causing an incident deliberately.

Source: NIST SP 800-61 Rev. 3 (NIST) — Sec. 2.2 Roles and Responsibilities — Human resources