Study. uk . com
  1. Home
  2. All questions
  3. Question 781

CISM study material · question 781 of 1000

Which two incident types does NIST give as examples of categorisation, and when does categorisation occur?

  1. Malware and phishing, before triage begins
  2. Technical and physical, during the recovery phase
  3. Insider and outsider, at the point of declaration
  4. Data breach and ransomware, in a more detailed review following the initial triage
Show the answer

Answer: D. Data breach and ransomware, in a more detailed review following the initial triage

SP 800-61r3 recommends performing a more detailed review of incidents to categorise them by incident type such as data breach, ransomware, account takeover or denial of service, following the preliminary triage.

Source: NIST SP 800-61 Rev. 3 (NIST) — Table 3 RS.MA-03.R1

Challenge yourself on this topic → Study as cards