Study. uk . com
  1. Home
  2. All questions
  3. Question 107

CISM study material · question 107 of 1000

When assembling a security investment portfolio, several priorities compete: an internal modernisation goal, a departmental preference, and a statutory obligation. Which does NIST say ranks highest?

  1. The departmental preference, since the department funds the work and can withdraw the money at any point
  2. The internal modernisation goal, since it delivers the most value per pound and shortens the estate's life cycle
  3. Whichever can be delivered soonest within the budget year, so that no allocated funding is surrendered at year end
  4. The statutory obligation, since law and executive guidance rank highest among priorities
Show the answer

Answer: D. The statutory obligation, since law and executive guidance rank highest among priorities

NIST notes that priorities may come from the mission and from executive or internal sources, and states explicitly that laws and executive branch guidance should be ranked highest among those priorities.

Source: NIST SP 800-100 (NIST) — Sec. 5.3 CPIC Roles and Responsibilities

Challenge yourself on this topic → Study as cards