Study. uk . com
  1. Home
  2. All questions
  3. Question 800

CISM study material · question 800 of 1000

How does NIST distinguish incident notification from incident coordination?

  1. Notification formally informs affected customers, employees, partners or regulators about a breach; coordination communicates response activities among those with response roles
  2. Notification is voluntary; coordination is mandatory
  3. Notification precedes detection; coordination follows it
  4. Notification is internal; coordination is external
Show the answer

Answer: A. Notification formally informs affected customers, employees, partners or regulators about a breach; coordination communicates response activities among those with response roles

SP 800-61r3 defines incident coordination as communicating current and planned response activities among internal and external parties with response roles, and incident notification as formally informing affected customers, employees, partners or regulators about a breach.

Source: NIST SP 800-61 Rev. 3 (NIST) — Table 3 RS.CO.N1

Challenge yourself on this topic → Study as cards