Study. uk . com
  1. Home
  2. All questions
  3. Question 380

CISM study material · question 380 of 1000

An organisation monitors its own networks and endpoints continuously but performs no monitoring of the managed service provider operating part of its estate. Which CSF 2.0 outcome is missing?

  1. Staff behaviour and the way the technology is used are kept under watch, so that anything out of the ordinary shows up quickly
  2. Networks and the network services running across them are monitored to find potentially adverse events in traffic
  3. The physical environment is monitored
  4. What external service providers do, and the services they run, are watched for adverse events
Show the answer

Answer: D. What external service providers do, and the services they run, are watched for adverse events

CSF 2.0's DE.CM-06 extends continuous monitoring beyond the organisation's own estate to the providers operating parts of it — the gap here.

Source: NIST CSWP 29 (NIST) — Appendix A DE.CM-06

Challenge yourself on this topic → Study as cards