Study. uk . com
  1. Home
  2. All questions
  3. Question 411

CISSP study material · question 411 of 500

An incident response plan cites the four-phase circular life cycle from the 2012 edition of NIST's incident handling guide. What changed in Revision 3?

  1. It split the four phases into eight, one per incident category.
  2. It renamed the four phases but kept the circular structure unchanged.
  3. It withdrew the life cycle concept entirely without a replacement.
  4. It replaces Revision 2 and organises the life cycle around the six CSF 2.0 Functions instead.
Show the answer

Answer: D. It replaces Revision 2 and organises the life cycle around the six CSF 2.0 Functions instead.

SP 800-61 Rev. 3 supersedes Revision 2, the Computer Security Incident Handling Guide, and presents a life cycle model based on the six CSF 2.0 Functions.

Source: NIST SP 800-61 Rev. 3 (NIST) — SP 800-61r3 > 1.1 Purpose and Scope and 2.1 Incident Response Life Cycle Model

Challenge yourself on this topic → Study as cards