Study. uk . com
  1. Home
  2. All questions
  3. Question 727

CISM study material · question 727 of 1000

How does NIST characterise a playbook in relation to procedures?

  1. As a technical script executed automatically
  2. As a replacement for documented procedures
  3. As a format that provides actionable steps for a scenario and improves the usability of procedures, not a different kind of document
  4. As a document required only for regulated organisations
Show the answer

Answer: C. As a format that provides actionable steps for a scenario and improves the usability of procedures, not a different kind of document

SP 800-61r3 treats a playbook as a presentation choice — actionable steps or tasks for a given scenario — adopted because putting procedures in that shape makes them easier to use.

Source: NIST SP 800-61 Rev. 3 (NIST) — Sec. 2.3 Incident Response Policies

Challenge yourself on this topic → Study as cards