Compare the four-phase Prepare, Observe, Resolve, Understand model with the more detailed NIST response stages.
Answer
Prepare corresponds to preparation. Observe covers monitoring, detection, reporting, and analysis. Resolve groups containment, eradication, and recovery. Understand corresponds to post-incident review and improvement. The models differ in granularity rather than in their overall response goals.
Explanation
### What a good answer covers
- Both models organize readiness, response, and learning.
- Prepare maps to preparation; Observe maps to monitoring and detection analysis.
- Resolve groups operational response actions that NIST describes as containment, eradication, and recovery.
- Understand maps to post-incident review and improvement.
### Remember
The four-phase model groups work; the NIST lifecycle separates several response actions.
Related Questions
- Which of the following is an example of an adversary attack activity, as opposed to a system vulnerability or a defensive measure? (Select all that apply.)(intermediate)
- Which information is most directly useful when coordinating technical response across teams?(basic)
- Attackers necessarily complete all life-cycle stages quickly, so extended monitoring is unnecessary.(basic)
- The foundational three-stage model of organizational change consisting of Unfreeze, Change, and Refreeze was introduced by social psychologist Kurt _____.(basic)
- Select ALL elements that belong in a documented cyber risk assessment.(intermediate)
Want to practice more questions like this?
Join myBenkio free and practice past questions for your Nigerian university courses with AI explanations for every answer.
Start Practicing Free