Study. uk . com
  1. Home
  2. All questions
  3. Question 447

CISM study material · question 447 of 1000

Which two events does SP 800-137 say should cause monitoring priorities to be adjusted? Choose two.

  1. A security incident
  2. The start of a new financial year
  3. Problems identified with a control's implementation
  4. A change of the monitoring tool vendor
Show the answer

Answer: A. A security incident
C. Problems identified with a control's implementation

SP 800-137 has priorities move in response to incidents, to trouble found in how a control was implemented, and to changes judged to carry significant security impact.

Source: NIST SP 800-137 (NIST) — Sec. 2.2 Ongoing System Authorizations

Challenge yourself on this topic → Study as cards