Study. uk . com
  1. Home
  2. All questions
  3. Question 808

CISM study material · question 808 of 1000

Which specific reporting path does NIST identify for malicious insider activity?

  1. Notifying all staff through an internal bulletin
  2. Notifying the external auditor within a fixed period
  3. Notifying the affected system's users directly
  4. Notifying human resources when such activity has occurred
Show the answer

Answer: D. Notifying human resources when such activity has occurred

SP 800-61r3 recommends notifying human resources when malicious insider activity has occurred, as a distinct recommendation from general stakeholder information sharing.

Source: NIST SP 800-61 Rev. 3 (NIST) — Table 3 RS.CO-03.R3

Challenge yourself on this topic → Study as cards