問題文
A reviewer has to write down why the handling of what is gathered during an incident is bound to written procedure, and what has to happen when a piece moves between two people. Which reading does NIST SP 800-61 support?
選択肢
- The main reason for gathering is to settle the incident, and yet what is gathered may be wanted in a court, so the procedures are drawn up well beforehand together with the legal staff and the officers of the law, and a piece that moves between two people is logged by the one who hands it over alone, in that hand-to-hand record.
- The main reason for gathering is to build a case in a court, and yet what is gathered may help settle the incident, so the procedures are drawn up beforehand with the legal staff and the officers of the law, and a piece that moves between two people is written up on a form that carries the mark of both, in that hand-to-hand record.
- The main reason for gathering is to settle the incident, and yet what is gathered may be wanted in a court, so the procedures are drawn up beforehand with the legal staff and the officers of the law, and a piece that moves between two people is written up on a form that carries the mark of both, in that hand-to-hand record.
- The main reason for gathering is to build a case in a court, and yet what is gathered may help settle the incident, so the procedures are settled after the fact by the very team that gathered and held on to it, and a piece that moves between two people is logged by the one who hands it over alone, in that hand-to-hand record.