Study. uk . com
  1. Home
  2. All questions
  3. Question 170

CISM study material · question 170 of 1000

During design, an assessment shows a proposed component carries known weaknesses that a comparable alternative does not. What does SP 800-39 identify as the advantage of switching at this point?

  1. Common controls become available that were previously unavailable, so the system can inherit protection rather than build it
  2. Design-related vulnerabilities can be mitigated during development by choosing less susceptible alternatives
  3. The system's categorisation can be lowered as a result
  4. The authorisation boundary can be reduced by the substitution, leaving fewer elements inside the scope of the authorisation
Show the answer

Answer: B. Design-related vulnerabilities can be mitigated during development by choosing less susceptible alternatives

SP 800-39 states that whether responding to specific threat information or to assumptions about threat, potential design-related vulnerabilities can be mitigated during the development and acquisition phase by choosing less susceptible alternatives.

Source: NIST SP 800-39 (NIST) — Sec. 2.5 Tier Three — Information Systems View

Challenge yourself on this topic → Study as cards