Study. uk . com
  1. Home
  2. All questions
  3. Question 441

CISM study material · question 441 of 1000

Which two things does establishing a continuous monitoring programme settle, under SP 800-137? Choose two.

  1. The status monitoring frequencies and control assessment frequencies
  2. The organisation's risk appetite statement and the tolerances that sit beneath it
  3. The disciplinary policy for breaches
  4. The technical architecture supporting the monitoring
Show the answer

Answer: A. The status monitoring frequencies and control assessment frequencies
D. The technical architecture supporting the monitoring

SP 800-137 states establishing an ISCM programme means determining the metrics, the status monitoring frequencies, the control assessment frequencies, and the ISCM technical architecture.

Source: NIST SP 800-137 (NIST) — Ch. 3 The Process

Challenge yourself on this topic → Study as cards