Study. uk . com
  1. Home
  2. All questions
  3. Question 80

CompTIA Security+ study material · question 80 of 611

A weakness is found that will not be remediated for nine months. Where should it be recorded so it stays visible and owned?

  1. In the control baseline
  2. In the plan of action and milestones
  3. In the incident response plan
  4. In the business continuity plan
Show the answer

Answer: B. In the plan of action and milestones

The plan of action and milestones records deferred weaknesses with an owner and a date so they are not quietly forgotten.

Source: NIST SP 800-37 Rev. 2 (NIST) — SP 800-37 Rev. 2 § 3.6 Authorize

Challenge yourself on this topic → Study as cards