Study. uk . com
  1. Home
  2. All questions
  3. Question 780

CISM study material · question 780 of 1000

Which two examples does NIST give of incidents reported to an organisation by outsiders? Choose two.

  1. A vendor announcing a new product vulnerability
  2. A regulator publishing a sector advisory
  3. An external user reporting that a service is unavailable
  4. A party claiming its systems are being attacked from a system at the organisation
Show the answer

Answer: D. A party claiming its systems are being attacked from a system at the organisation
C. An external user reporting that a service is unavailable

SP 800-61r3 recommends having mechanisms for third parties to report possible incidents, giving as examples a party claiming its systems are being attacked by a system at the organisation, external users reporting an unavailable service, and other response teams reporting incidents.

Source: NIST SP 800-61 Rev. 3 (NIST) — Table 3 RS.MA-02.R2

Challenge yourself on this topic → Study as cards