Study. uk . com
  1. Home
  2. All questions
  3. Question 465

CISM study material · question 465 of 1000

Which two constraints does SP 800-137 say may limit the decisions of officials at the upper tiers? Choose two.

  1. Immutable governance policies and external drivers
  2. The availability of a particular monitoring product on the open commercial market
  3. Limitations of the infrastructure, including its human components
  4. The preferences expressed by each of the individual system owners
Show the answer

Answer: C. Limitations of the infrastructure, including its human components
A. Immutable governance policies and external drivers

SP 800-137 lists what boxes in senior officials: mission and business needs, what the infrastructure and its people can actually do, governance policy that cannot be changed, and external drivers.

Source: NIST SP 800-137 (NIST) — Sec. 3.1.1 Organization and Mission Tier Strategy

Challenge yourself on this topic → Study as cards