Study. uk . com
  1. Home
  2. All questions
  3. Question 801

CISM study material · question 801 of 1000

When does NIST say the mechanisms for coordinating with affected parties should be established?

  1. At the point an incident is declared
  2. In advance, so they are available when an incident requires them
  3. After the incident's scope is understood
  4. Once legal counsel has reviewed the incident
Show the answer

Answer: B. In advance, so they are available when an incident requires them

SP 800-61r3 wants the coordination mechanisms standing before they are needed, so that reaching affected parties during an incident is not itself an improvisation.

Source: NIST SP 800-61 Rev. 3 (NIST) — Table 3 RS.CO.R1

Challenge yourself on this topic → Study as cards