Study. uk . com
  1. Home
  2. All questions
  3. Question 450

CISM study material · question 450 of 1000

A monitoring programme is built entirely around the data the organisation can already collect automatically. Which caution does SP 800-137 give?

  1. Only automated data may be used in security status reporting
  2. The strategy must not focus solely on information that is easy to collect or easy to automate
  3. Automated collection is unreliable and should always be supplemented by a manual check of the same security objects
  4. Manual monitoring must be eliminated before the programme can be considered mature enough to report upward
Show the answer

Answer: B. The strategy must not focus solely on information that is easy to collect or easy to automate

SP 800-137 refuses to let ease of collection set the agenda: what is simple to gather or automate is not the whole strategy, and some monitoring will start out manual.

Source: NIST SP 800-137 (NIST) — Sec. 2.3 Role of Automation

Challenge yourself on this topic → Study as cards