- Home
- All questions
- Question 834
CISM study material · question 834 of 1000
An organisation's monitoring surfaces adverse events but nobody can say when one becomes an incident. Which CSF 2.0 prerequisite is missing?
Show the answer
Answer: B. Defined incident criteria against which adverse events are judged so that an incident can be declared
CSF 2.0 subcategory DE.AE-08 states incidents are declared when adverse events meet the defined incident criteria, which makes those criteria a prerequisite for beginning response.
Source: NIST CSWP 29 (NIST) — Appendix A DE.AE-08