Study. uk . com
  1. Home
  2. All questions
  3. Question 773

CISM study material · question 773 of 1000

A team handles incidents strictly in the order they are reported. What does NIST say about this practice?

  1. Incidents should not be handled first come, first served, because resources are limited and priority must follow risk
  2. First come, first served is required for regulatory traceability
  3. First come, first served is acceptable wherever all of the incidents sitting in the queue are of a similar severity to one another
  4. First come, first served is the fairest allocation of scarce resources
Show the answer

Answer: A. Incidents should not be handled first come, first served, because resources are limited and priority must follow risk

SP 800-61r3 rules out first-come, first-served handling outright, on the ground that resources are limited and so priority has to follow risk.

Source: NIST SP 800-61 Rev. 3 (NIST) — Table 3 RS.MA.R1

Challenge yourself on this topic → Study as cards