Study. uk . com
  1. Home
  2. All questions
  3. Question 732

CISM study material · question 732 of 1000

Which Govern category does the incident response Community Profile rate as high priority, and on what basis?

  1. Organizational Context, on the basis that notification obligations are recorded there with the other legal requirements
  2. Oversight, on the basis that incidents inform strategy
  3. Policy, on the basis that cybersecurity policies should include an incident response policy
  4. Risk Management Strategy, on the basis of escalation criteria
Show the answer

Answer: C. Policy, on the basis that cybersecurity policies should include an incident response policy

In SP 800-61r3's Community Profile, GV.PO Policy is rated high with the recommendation that cybersecurity policies should include an incident response policy, while other Govern categories are rated lower.

Source: NIST SP 800-61 Rev. 3 (NIST) — Table 2 GV.PO

Challenge yourself on this topic → Study as cards