Study. uk . com
  1. Home
  2. All questions
  3. Question 445

CISM study material · question 445 of 1000

In which circumstance does SP 800-137 identify sampling of security objects as particularly efficient?

  1. Where the monitoring is not automated
  2. Where the control is inherited rather than system-specific
  3. Where the organisation has no risk tolerance statement
  4. Where the system has been categorised as high impact
Show the answer

Answer: A. Where the monitoring is not automated

SP 800-137 recommends sampling security objects rather than inspecting all of them, and singles out unautomated monitoring as where that trade pays off most.

Source: NIST SP 800-137 (NIST) — Sec. 2.2 Ongoing System Authorizations

Challenge yourself on this topic → Study as cards