Study. uk . com
  1. Home
  2. All questions
  3. Question 460

CISM study material · question 460 of 1000

A monitoring strategy states only that it will be reviewed annually. Which further element does SP 800-137 require?

  1. Stated conditions that trigger a review or update of the strategy
  2. The name of the official who will be conducting each of the scheduled reviews
  3. A comparison against the monitoring strategies published by peer organisations
  4. A quantitative target for each metric
Show the answer

Answer: A. Stated conditions that trigger a review or update of the strategy

SP 800-137 treats those trigger conditions as an inherent part of the strategy, sitting alongside — not replaced by — the pre-established review frequency.

Source: NIST SP 800-137 (NIST) — Sec. 3.1 Define ISCM Strategy

Challenge yourself on this topic → Study as cards