Study. uk . com
  1. Home
  2. All questions
  3. Question 771

CISM study material · question 771 of 1000

Which three sources does the Community Profile name for acquiring vulnerability disclosures about the organisation's own technologies?

  1. Regulators, external auditors and the organisation's own insurers
  2. Security researchers, technology journalists and industry analysts
  3. Sector peers, direct competitors and the organisation's own customers
  4. Suppliers, vendors and third-party security advisories
Show the answer

Answer: D. Suppliers, vendors and third-party security advisories

SP 800-61r3 recommends rapidly acquiring and analysing vulnerability disclosures for the organisation's technologies from suppliers, vendors and third-party security advisories.

Source: NIST SP 800-61 Rev. 3 (NIST) — Table 3 DE.AE-07.R2

Challenge yourself on this topic → Study as cards