Study. uk . com
  1. Home
  2. All questions
  3. Question 726

CISM study material · question 726 of 1000

Which two purposes does NIST say periodic exercising of procedures serves? Choose two.

  1. Verifying that the procedures are still accurate
  2. Establishing the incident severity scale
  3. Satisfying the applicable regulator's own evidence requirement
  4. Training new personnel
Show the answer

Answer: A. Verifying that the procedures are still accurate
D. Training new personnel

SP 800-61r3 gets two returns from exercising procedures periodically: confirmation that they are still accurate, and a way of bringing new staff up to speed.

Source: NIST SP 800-61 Rev. 3 (NIST) — Sec. 2.3 Incident Response Policies

Challenge yourself on this topic → Study as cards