Study. uk . com
  1. Home
  2. All questions
  3. Question 777

CISM study material · question 777 of 1000

Which arrangement does NIST suggest to give a single point of ownership for each incident?

  1. Assigning the ownership to the owner of the affected system
  2. Designating an incident lead for each incident
  3. Assigning the ownership to the manager of the security operations centre
  4. Rotating the ownership among the response team on a daily basis
Show the answer

Answer: B. Designating an incident lead for each incident

SP 800-61r3 suggests considering designating an incident lead for each incident, as part of executing the incident response plan once an incident is declared.

Source: NIST SP 800-61 Rev. 3 (NIST) — Table 3 RS.MA-01.C1

Challenge yourself on this topic → Study as cards