Study. uk . com
  1. Home
  2. All questions
  3. Question 805

CISM study material · question 805 of 1000

Why does NIST describe voluntary incident information sharing as mutually beneficial?

  1. Because the same threats and attacks affect multiple organisations simultaneously
  2. Because it substitutes entirely for the organisation's own internal detection capability here
  3. Because it transfers liability to the sharing community
  4. Because the sharing reduces each of the organisations' own regulatory obligations to report
Show the answer

Answer: A. Because the same threats and attacks affect multiple organisations simultaneously

SP 800-61r3 grounds the mutual benefit in the fact that one threat or attack tends to hit several organisations at once, citing techniques shared with a sector information sharing and analysis centre.

Source: NIST SP 800-61 Rev. 3 (NIST) — Table 3 RS.CO-03.N1

Challenge yourself on this topic → Study as cards