Study. uk . com
  1. Home
  2. All questions
  3. Question 743

CISM study material · question 743 of 1000

Which three forms does NIST say an evaluation of the incident response programme can take?

  1. Interviews, inspections and technical tests
  2. Tabletop exercises, functional exercises and full-scale exercises run against the plan
  3. Peer review, benchmark and certification
  4. Self-assessments, third-party assessments and independent audits
Show the answer

Answer: D. Self-assessments, third-party assessments and independent audits

SP 800-61r3 asks for periodic evaluation of programme performance to surface problems and shortcomings, and offers self-assessment, third-party assessment and independent audit as the forms it can take.

Source: NIST SP 800-61 Rev. 3 (NIST) — Table 2 ID.IM-01

Challenge yourself on this topic → Study as cards