Study. uk . com
  1. Home
  2. All questions
  3. Question 451

CISM study material · question 451 of 1000

An organisation deploys sophisticated monitoring technology but its staff routinely bypass the surrounding procedures. What does SP 800-137 say results?

  1. The finding is recorded as a tooling defect
  2. The effectiveness of the technology is compromised, because the tools operate inside processes humans design and run
  3. Monitoring results remain valid but must first be reviewed manually by an analyst before any of them are used in a status report
  4. The technology compensates for the procedural failures
Show the answer

Answer: B. The effectiveness of the technology is compromised, because the tools operate inside processes humans design and run

SP 800-137 places tools inside processes that people design, operate and maintain; where those people work insecurely, the technology's effectiveness goes with them.

Source: NIST SP 800-137 (NIST) — Sec. 2.3 Role of Automation

Challenge yourself on this topic → Study as cards