1. Home
2. All questions
3. Question 500

CISSP study material · question 500 of 500

An alert fires for a use case whose response playbook was written three years ago and never revised. What does OWASP say about this?

• Software security

1. The alert should be suppressed until the playbook is rewritten.
2. A detected alert cannot be processed correctly where the playbook is incomplete, out of date or missing, and this counts as a logging and alerting failure.
3. Playbook currency matters only for alerts raised by automated tooling.
4. Playbooks are operational documents and fall outside the application security category.

Challenge yourself on this topic → Study as cards