Study. uk . com
  1. Home
  2. All questions
  3. Question 725

CISM study material · question 725 of 1000

Since detailed procedures cannot cover every situation, which two kinds does NIST advise documenting? Choose two.

  1. Procedures for every conceivable scenario, however unlikely
  2. Procedures for the most common types of incident and threat
  3. Procedures written by the provider only
  4. Procedures for urgent processes needed in emergencies, such as redeploying the primary authentication platform
Show the answer

Answer: B. Procedures for the most common types of incident and threat
D. Procedures for urgent processes needed in emergencies, such as redeploying the primary authentication platform

SP 800-61r3 concedes no set of procedures covers everything, and directs the effort at the incidents and threats seen most often, plus the processes urgently needed in an emergency.

Source: NIST SP 800-61 Rev. 3 (NIST) — Sec. 2.3 Incident Response Policies

Challenge yourself on this topic → Study as cards