Study. uk . com
  1. Home
  2. All questions
  3. Question 751

CISM study material · question 751 of 1000

Which two benefits does NIST attribute to reducing the number of incidents, beyond preventing the incidents themselves? Choose two.

  1. Response teams can focus on high-impact situations
  2. The impact of incidents that do occur is reduced, for example by slowing lateral movement
  3. The requirement to hold a documented incident response plan is removed from the organisation entirely
  4. The organisation's own insurance premium falls in each successive year
Show the answer

Answer: A. Response teams can focus on high-impact situations
B. The impact of incidents that do occur is reduced, for example by slowing lateral movement

SP 800-61r3 counts three gains from fewer incidents: shorter operational disruption, responders free to concentrate where impact is high, and smaller impact when something does land, because lateral movement is harder.

Source: NIST SP 800-61 Rev. 3 (NIST) — Table 2 PR.N1

Challenge yourself on this topic → Study as cards