Study. uk . com
  1. Home
  2. All questions
  3. Question 342

CISM study material · question 342 of 1000

Which two circumstances does SP 800-30 say warrant greater analytical detail? Choose two.

  1. Shared infrastructure that is a common point of failure for several missions
  2. Systems operated by an external provider
  3. Systems assessed most recently
  4. Systems of high criticality or sensitivity
Show the answer

Answer: A. Shared infrastructure that is a common point of failure for several missions
D. Systems of high criticality or sensitivity

SP 800-30 states organisations can be expected to require more detail for highly critical business functions, common infrastructures or shared services on which multiple functions depend as common points of failure, and systems of high criticality or sensitivity.

Source: NIST SP 800-30 Rev. 1 (NIST) — Task 1-3 Identify Assumptions and Constraints

Challenge yourself on this topic → Study as cards