Study. uk . com
  1. Home
  2. All questions
  3. Question 43

CISM study material · question 43 of 1000

Having chosen a hybrid governance structure, an organisation's leadership treats the decision as settled permanently. What does NIST say about that assumption?

  1. The structure must stay fixed for at least a full budget cycle, since funding lines cannot be reassigned partway through a year
  2. The structure is set by the organisation's regulator and cannot be changed without a formal written waiver granted by that regulator
  3. Only a merger or an acquisition can justify revisiting the structure, because routine organisational change is simply absorbed by the existing reporting lines
  4. An organisation's position on the continuum can shift over time as internal factors or external requirements change
Show the answer

Answer: D. An organisation's position on the continuum can shift over time as internal factors or external requirements change

SP 800-100 treats a governance structure's position on that continuum as provisional: internal change or new external obligations can move it. Leadership should revisit the choice, not bank it.

Source: NIST SP 800-100 (NIST) — Sec. 2.2.2 Governance Structures

Challenge yourself on this topic → Study as cards