Study. uk . com
  1. Home
  2. All questions
  3. Question 446

CISM study material · question 446 of 1000

An organisation sets one monitoring frequency and applies it to every metric permanently. Which two points does SP 800-137 make? Choose two.

  1. Frequencies must be set by the authorising official for the system
  2. Frequencies change only at annual review
  3. Frequencies are not uniform across all metrics
  4. Frequencies are not static
Show the answer

Answer: D. Frequencies are not static
C. Frequencies are not uniform across all metrics

SP 800-137 states monitoring frequencies are not static and are not uniform across all metrics, being adjusted to support changes in systems or environments including emerging threat and vulnerability information.

Source: NIST SP 800-137 (NIST) — Sec. 2.2 Ongoing System Authorizations

Challenge yourself on this topic → Study as cards