1. Home
2. All questions
3. Question 462

CISM study material · question 462 of 1000

Where does SP 800-137 say the organisation-wide monitoring strategy and its general implementation procedures are typically developed?

• Security program

1. The strategy at the business process tier and the general implementation procedures at the organisation tier that sits above it
2. Both of them at the organisation tier, so that a single central team keeps the strategy and the procedures consistent with one another
3. The strategy and policy at the organisation tier, with general implementation procedures at the business process tier
4. Both at the system tier, where the data originates

Challenge yourself on this topic → Study as cards