Study. uk . com
  1. Home
  2. All questions
  3. Question 940

CISM study material · question 940 of 1000

How do the results of a training, test or exercise event reach the plan, per NIST?

  1. Through the risk register, where each one of them is treated as a finding that has to be closed out over time
  2. Through a briefing given to the plan coordinator, who then decides whether or not to record any of them at all
  3. Through an after-action report whose lessons learned become corrective actions that update the plan
  4. Through the change management process at the next scheduled review of the whole of the plan document itself in due course here
Show the answer

Answer: C. Through an after-action report whose lessons learned become corrective actions that update the plan

SP 800-34r1 states results of each test, training or exercise event are documented in an after-action report, and lessons learned are turned into corrective actions used to update the plan.

Source: NIST SP 800-34 Rev. 1 (NIST) — Sec. 3.5 Plan Testing, Training, and Exercises

Challenge yourself on this topic → Study as cards