CISSP-ISSMP · Question #166
NIST Special Publication 800-50 is a security awareness program. It is designed for those people who are currently working in the information technology field and want information on security…
The correct answer is B. Awareness and Training Material Development D. Awareness and Training Program Design. NIST SP 800-50 'Building an Information Technology Security Awareness and Training Program' defines a structured lifecycle for security awareness programs. The critical steps outlined in the publication include: (D) Awareness and Training Program Design - establishing the…
Question
NIST Special Publication 800-50 is a security awareness program. It is designed for those people who are currently working in the information technology field and want information on security policies. Which of the following are some of its critical steps? Each correct answer represents a complete solution. Choose two.
Options
- AAwareness and Training Material Effectiveness
- BAwareness and Training Material Development
- CAwareness and Training Material Implementation
- DAwareness and Training Program Design
How the community answered
(44 responses)- A5% (2)
- B89% (39)
- C7% (3)
Explanation
NIST SP 800-50 'Building an Information Technology Security Awareness and Training Program' defines a structured lifecycle for security awareness programs. The critical steps outlined in the publication include: (D) Awareness and Training Program Design - establishing the framework, goals, audience, and scope of the program; and (B) Awareness and Training Material Development - creating the actual content, curriculum, and materials used to deliver the training. While implementation (C) and effectiveness measurement (A) are also part of the broader lifecycle, the question asks specifically about the steps NIST 800-50 identifies as 'critical,' which center on design and development as the foundational phases before deployment occurs.
Topics
Community Discussion
No community discussion yet for this question.