Study. uk . com
  1. Home
  2. All questions
  3. Question 438

CISM study material · question 438 of 1000

Which sequence correctly describes NIST's six-step continuous monitoring process?

  1. Define the strategy, establish the programme, implement it, analyse and report, respond to findings, review and update
  2. Identify, protect, detect, respond, recover, govern
  3. Frame, assess, respond, monitor, report, improve
  4. Categorise, select, implement, assess, authorise and then monitor each of the systems throughout the whole of its operating life cycle
Show the answer

Answer: A. Define the strategy, establish the programme, implement it, analyse and report, respond to findings, review and update

SP 800-137 sets out the process as defining an ISCM strategy, establishing the programme, implementing it, analysing data and reporting findings, responding to findings, and reviewing and updating the programme.

Source: NIST SP 800-137 (NIST) — Ch. 3 The Process

Challenge yourself on this topic → Study as cards