Study. uk . com
  1. Home
  2. All questions
  3. Question 730

CISM study material · question 730 of 1000

In the incident response Community Profile, which tags distinguish an obligation from something to be weighed?

  1. R marks a requirement; C marks a control
  2. R marks a risk; C marks a category
  3. R marks a recommendation the organisation should do; C marks a consideration it should consider doing
  4. R marks a response activity carried out during an incident; C marks a communication made to a party outside the team
Show the answer

Answer: C. R marks a recommendation the organisation should do; C marks a consideration it should consider doing

SP 800-61r3 states each item is tagged R for a recommendation, something the organisation should do; C for a consideration, something it should consider doing; and N for a note carrying additional information.

Source: NIST SP 800-61 Rev. 3 (NIST) — Sec. 3 CSF 2.0 Community Profile

Challenge yourself on this topic → Study as cards