I have a couple of students who are telling me that on a practice exam they were asked to identify a particular NIST publication. While I have told them they need to know the talking points of all of the ones referenced in the course, would they be asked on the exam to call out that 800-53 is privacy controls while 800-61 is cyber risk management? I do not remember a question like that... although I think another exam I sat had them.
Thanks in advance!
Thanks in advance!