Study. uk . com
  1. Home
  2. All questions
  3. Question 752

CISM study material · question 752 of 1000

Which detection advantage does NIST attribute to understanding the protection mechanisms already in place?

  1. Protection mechanisms can be removed once detection exists, since the two do the same work twice over
  2. Protection mechanisms can be assessed less frequently
  3. Personnel can deploy methods to detect the failure or bypass of those very mechanisms
  4. Detection becomes unnecessary wherever protection is strong enough, which is why the two are traded off
Show the answer

Answer: C. Personnel can deploy methods to detect the failure or bypass of those very mechanisms

SP 800-61r3 turns knowledge of the protections in place into detection: knowing them, staff can put in place ways of seeing when they fail or are bypassed.

Source: NIST SP 800-61 Rev. 3 (NIST) — Table 2 PR.N2

Challenge yourself on this topic → Study as cards