- Home
- All questions
- Question 996
CISM study material · question 996 of 1000
When must evaluation criteria for an exercise be written, and why?
Show the answer
Answer: A. Before the exercise, so data collectors know what to capture during it
SP 800-84 requires evaluation criteria be developed before the exercise so that data collectors know what to capture during it, rather than deriving criteria afterwards.
Source: NIST SP 800-84 (NIST) — Sec. 4.3 Develop the Material