Study. uk . com
  1. Home
  2. All questions
  3. Question 723

CISM study material · question 723 of 1000

Which two further elements does NIST include in an incident response policy? Choose two.

  1. Guidelines for prioritising incidents, estimating severity and initiating recovery
  2. The organisation's cyber insurance policy number and the contact details of the broker that arranged it
  3. A directory of all the external forensic providers on retainer now
  4. Performance measures for the incident response capability
Show the answer

Answer: A. Guidelines for prioritising incidents, estimating severity and initiating recovery
D. Performance measures for the incident response capability

SP 800-61r3 puts two more things in the policy: how incidents get ranked, how severity is judged, how recovery starts and operations are held or restored; and how the capability's performance is measured.

Source: NIST SP 800-61 Rev. 3 (NIST) — Sec. 2.3 Incident Response Policies

Challenge yourself on this topic → Study as cards