Study. uk . com
  1. Home
  2. All questions
  3. Question 755

CISM study material · question 755 of 1000

An organisation delivers role-based training covering technical skills but omitting what each role must do during an incident. Which recommendation is unmet?

  1. Role-based training should be delivered before any access at all is granted to the person
  2. Role-based training should include incident-related responsibilities
  3. Role-based training should be delivered at least once in every twelve-month period
  4. Role-based training should be assessed by a formal written examination afterwards
Show the answer

Answer: B. Role-based training should include incident-related responsibilities

SP 800-61r3's recommendation against PR.AT-02 states that role-based training should include incident-related responsibilities, alongside the general awareness given to all personnel.

Source: NIST SP 800-61 Rev. 3 (NIST) — Table 2 PR.AT-02.R1

Challenge yourself on this topic → Study as cards