Study. uk . com
  1. Home
  2. All questions
  3. Question 804

CISM study material · question 804 of 1000

Which two conditions govern notifying law enforcement or a regulator, under NIST guidance? Choose two.

  1. Criteria set in the incident response plan
  2. Confirmation of the attacker
  3. Unanimous agreement of the response team
  4. Management approval, with designated individuals making the contact
Show the answer

Answer: A. Criteria set in the incident response plan
D. Management approval, with designated individuals making the contact

SP 800-61r3 recommends notifying law enforcement agencies and regulatory bodies based on criteria in the incident response plan and management approval, with designated individuals contacting these parties consistently with legal requirements and organisational policy.

Source: NIST SP 800-61 Rev. 3 (NIST) — Table 3 RS.CO-02.R5

Challenge yourself on this topic → Study as cards