Study. uk . com
  1. Home
  2. All questions
  3. Question 745

CISM study material · question 745 of 1000

Which two places can an improvement identified during incident response apply to, according to NIST? Choose two.

  1. Other aspects of risk management, such as attacker techniques no safeguard currently blocks
  2. The incident response programme itself, such as its plan, policy, processes or procedures
  3. The organisation's own financial reporting controls and the way in which each of them has been designed
  4. The vendor's own product development roadmap for each one of the next three financial years ahead
Show the answer

Answer: B. The incident response programme itself, such as its plan, policy, processes or procedures
A. Other aspects of risk management, such as attacker techniques no safeguard currently blocks

SP 800-61r3 notes improvements affecting incident response can be made to the response programme itself — plan, policy, processes, procedures — or to other aspects of cybersecurity risk management, such as identifying attacker techniques not currently blocked or flagged.

Source: NIST SP 800-61 Rev. 3 (NIST) — Table 2 ID.IM-03.N2

Challenge yourself on this topic → Study as cards