Study. uk . com
  1. Home
  2. All questions
  3. Question 440

CISM study material · question 440 of 1000

Which two things must a continuous monitoring strategy maintain, according to SP 800-137? Choose two.

  1. A signed attestation from each system owner
  2. Up-to-date threat information and knowledge of mission impact
  3. A complete catalogue of every log source
  4. Clear visibility into assets and awareness of vulnerabilities
Show the answer

Answer: D. Clear visibility into assets and awareness of vulnerabilities
B. Up-to-date threat information and knowledge of mission impact

SP 800-137 builds the strategy on risk tolerance and asks it to sustain four things: sight of the assets, awareness of weaknesses, current threat information, and an understanding of business impact.

Source: NIST SP 800-137 (NIST) — Ch. 3 The Process

Challenge yourself on this topic → Study as cards