Study. uk . com
  1. Home
  2. All questions
  3. Question 835

CISM study material · question 835 of 1000

Which two outcomes belong to the CSF 2.0 Incident Management category? Choose two.

  1. Incidents are escalated or elevated as needed
  2. Incidents are contained
  3. Incident reports are triaged and validated
  4. The recovery plan is executed
Show the answer

Answer: C. Incident reports are triaged and validated
A. Incidents are escalated or elevated as needed

CSF 2.0's RS.MA Incident Management covers executing the response plan with third parties, triaging and validating reports, categorising and prioritising incidents, escalating or elevating them, and applying recovery criteria. Containment sits under Incident Mitigation.

Source: NIST CSWP 29 (NIST) — Appendix A RS.MA

Challenge yourself on this topic → Study as cards