Study. uk . com
  1. Home
  2. All questions
  3. Question 809

CISM study material · question 809 of 1000

How does NIST characterise the duty to inform senior leadership about a major incident?

  1. As optional unless the senior leadership specifically asks for an update on the incident that is currently in progress
  2. As a recurring duty to provide regular updates on status, rather than a single notification
  3. As a single notification made at the point at which the incident is first formally declared to be one
  4. As a duty that is fully discharged by the after-action report written once the incident has finally closed
Show the answer

Answer: B. As a recurring duty to provide regular updates on status, rather than a single notification

SP 800-61r3 recommends regularly updating senior leadership on the status of major incidents, making it a recurring obligation rather than a one-off notification.

Source: NIST SP 800-61 Rev. 3 (NIST) — Table 3 RS.CO-03.R2

Challenge yourself on this topic → Study as cards