A security team is creating tickets to track the progress of remediation. Which of the following is used to specify the due dates for high- and critical-priority findings?

The correct answer is B. SLA. A Service Level Agreement (SLA) defines the required response and resolution times (i.e., due dates) for different severity levels, such as high- and critical-priority findings. By embedding these timelines in the SLA, the security team and stakeholders share a clear…

Submitted by olafpl· Mar 6, 2026Governance, Risk, and Compliance

Question

Options

AMSA
BSLA
CISA
DMOU

How the community answered

(43 responses)

A
2% (1)
B
91% (39)
C
5% (2)
D
2% (1)

Explanation

A Service Level Agreement (SLA) defines the required response and resolution times (i.e., due dates) for different severity levels, such as high- and critical-priority findings. By embedding these timelines in the SLA, the security team and stakeholders share a clear expectation for how quickly each class of issue must be remediated.

Community Discussion

No community discussion yet for this question.

Full CAS-005 Practice