Study. uk . com
  1. Home
  2. All questions
  3. Question 837

CISM study material · question 837 of 1000

Under which CSF 2.0 function do containment and eradication sit, and which category holds them?

  1. Identify, under its own Improvement category
  2. Recover, under Incident Recovery Plan Execution
  3. Respond, under Incident Mitigation
  4. Detect, under the Adverse Event Analysis category
Show the answer

Answer: C. Respond, under Incident Mitigation

CSF 2.0 places incidents are contained and incidents are eradicated as the two outcomes of the Incident Mitigation category within the Respond function.

Source: NIST CSWP 29 (NIST) — Appendix A RS.MI

Challenge yourself on this topic → Study as cards