Study. uk . com
  1. Home
  2. All questions
  3. Question 806

CISM study material · question 806 of 1000

How does NIST frame the economic effect of sharing detection techniques between organisations?

  1. It lowers attackers' return on investment and raises their costs, since developing or buying exploits is expensive
  2. It shifts the cost of detection to the sharing community
  3. It reduces the cost of each organisation's own security tooling, since the shared techniques do the work the products would do
  4. It has no measurable economic effect on attackers
Show the answer

Answer: A. It lowers attackers' return on investment and raises their costs, since developing or buying exploits is expensive

SP 800-61r3 notes exploits cost money to build or buy and to deploy, so spreading detection techniques well drives attacker costs up and their return down.

Source: NIST SP 800-61 Rev. 3 (NIST) — Table 3 RS.CO-03.N2

Challenge yourself on this topic → Study as cards