Study. uk . com
  1. Home
  2. All questions
  3. Question 768

CISM study material · question 768 of 1000

Some technologies in the estate cannot be adequately monitored through automation. What does NIST recommend?

  1. Regularly conducting manual reviews of their log events
  2. Accepting the gap and documenting it as residual risk
  3. Relying on the vendor's own monitoring service
  4. Removing those technologies from the estate
Show the answer

Answer: A. Regularly conducting manual reviews of their log events

SP 800-61r3 answers the automation gap with regular manual review of those technologies' log events rather than letting the coverage lapse.

Source: NIST SP 800-61 Rev. 3 (NIST) — Table 3 DE.AE-02.R3

Challenge yourself on this topic → Study as cards