According to the National Institute of Standards and Technology (NIST) SP 800-40, which of the following considerations are MOST important when creating a vulnerability management program?

According to the National Institute of Standards and Technology (NIST) SP 800-40, which of the following considerations are MOST important when creating a vulnerability management program?
A . Susceptibility to attack, mitigation response time, and cost
B . Attack vectors, controls cost, and investigation staffing needs
C . Vulnerability exploitation, attack recovery, and mean time to repair
D . Susceptibility to attack, expected duration of attack, and mitigation availability

View Answer

Answer: A