CISSP-ISSMP: Information Systems Security Management Professional

By ISC · Question Mode

QuestionQ170

VerifiedSecurity Operations

NIST Special Publication 800-50 is a security-awareness program designed for people currently working in the information technology field who seek information about security policies. Which of the following are among its critical steps? Each correct answer represents a complete solution.

Choose two
Explanation

NIST SP 800-50 lists awareness and training program design and awareness and training material development as critical steps in the lifecycle of an IT security awareness and training program. Implementation is a program-level step, not “awareness and training material implementation.”

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!