Study. uk . com
  1. Home
  2. All questions
  3. Question 737

CISM study material · question 737 of 1000

Which two recommendations does the Community Profile make about incident response roles? Choose two.

  1. Everyone involved is given the authority their incident response responsibilities actually require
  2. All of the roles should be filled only by the organisation's own directly employed internal members of staff
  3. All of the roles should be reviewed once every quarter by the organisation's own audit committee and by the chair of that committee
  4. All roles and responsibilities involving incident response should be documented in the organisation's policies
Show the answer

Answer: D. All roles and responsibilities involving incident response should be documented in the organisation's policies
A. Everyone involved is given the authority their incident response responsibilities actually require

SP 800-61r3 asks for incident response roles and responsibilities to be set down in policy, and for the individuals or parties holding them to carry the authority those responsibilities need.

Source: NIST SP 800-61 Rev. 3 (NIST) — Table 2 GV.RR-02

Challenge yourself on this topic → Study as cards