Study. uk . com
  1. Home
  2. All questions
  3. Question 414

CISSP study material · question 414 of 500

Which two changes in the incident landscape does NIST SP 800-61 Rev. 3 give as reasons for recasting the life cycle? Choose two.

  1. Incident response tooling has become standardised across vendors.
  2. Regulators now require a specific response methodology to be followed.
  3. Incidents occur frequently and cause far more damage than when the earlier model was written.
  4. Recovery often runs for weeks or months because of the breadth and complexity of incidents.
Show the answer

Answer: C. Incidents occur frequently and cause far more damage than when the earlier model was written.
D. Recovery often runs for weeks or months because of the breadth and complexity of incidents.

When the earlier model was written incidents were rare and narrow; today they are frequent, far more damaging, and often take weeks or months to recover.

Source: NIST SP 800-61 Rev. 3 (NIST) — SP 800-61r3 > 2.1 Incident Response Life Cycle Model

Challenge yourself on this topic → Study as cards