Study. uk . com
  1. Home
  2. All questions
  3. Question 733

CISM study material · question 733 of 1000

Which three legal aspects does the Community Profile ask cybersecurity requirements to capture?

  1. Contract law, employment law and privacy law
  2. Retention periods, disposal methods and the archiving of all the evidence that has since been gathered
  3. Evidence handling, prosecution thresholds and the court procedure that follows any such criminal referral
  4. Incident notification duties, data breach reporting, and other aspects of incident response
Show the answer

Answer: D. Incident notification duties, data breach reporting, and other aspects of incident response

SP 800-61r3's recommendation against legal, regulatory and contractual requirements states cybersecurity requirements should include all requirements related to incident notifications, data breach reporting, and other aspects of incident response.

Source: NIST SP 800-61 Rev. 3 (NIST) — Table 2 GV.OC-03.R1

Challenge yourself on this topic → Study as cards