Study. uk . com
  1. Home
  2. All questions
  3. Question 845

CISM study material · question 845 of 1000

How does CSF 2.0 treat the estimation of an adverse event's impact and scope?

  1. As part of the incident declaration outcome, since the scope is what decides whether it is an incident at all
  2. As its own detection outcome, separate from analysing the event to understand associated activities
  3. As part of the recovery planning outcomes
  4. As part of the incident analysis outcomes that sit under the Respond function of the framework rather than under Detect
Show the answer

Answer: B. As its own detection outcome, separate from analysing the event to understand associated activities

CSF 2.0 keeps DE.AE-04, on grasping how far and how hard an adverse event reaches, separate from DE.AE-02, on analysing events to understand the activity around them.

Source: NIST CSWP 29 (NIST) — Appendix A DE.AE-04

Challenge yourself on this topic → Study as cards