The u. s. national institute of standards and technology recommends a set of tools for the csirt including incident reporting mechanisms with which users can report suspected incidents. at least one of these mechanisms should permit people to report incidents
a. anonymously
b. directly to the csoc. online d. for a reward

a. anonymously

Explanation:

According to my research on information technology and cyber security, I can say that based on the information provided within the question at least one of these mechanisms should permit people to report incidents anonymously. This is because, when there is an incident that can cause massive damage and loss of information, the people responsible may not want to admit it or shed light on the incident because they do not want to deal with the consequences, yet the problem needs to be solved one way or another. Therefore having an anonymous option would get rid of any doubt and allow for incidents to be dealt with faster.

I hope this answered your question. If you have any more questions feel free to ask away at .

answer; criterion validity