Study. uk . com
  1. Home
  2. All questions
  3. Question 466

CISM study material · question 466 of 1000

Which two inputs shape a system-level continuous monitoring strategy, according to SP 800-137? Choose two.

  1. The system owner's personal risk preference
  2. The system's architecture and operational environment
  3. The vendor's recommended monitoring configuration
  4. Organisational and mission-level requirements
Show the answer

Answer: B. The system's architecture and operational environment
D. Organisational and mission-level requirements

SP 800-137 has system owners weigh both the local picture — architecture and operating environment — and what the organisation and mission demand through policy, procedure and templates.

Source: NIST SP 800-137 (NIST) — Sec. 3.1.2 Information System Tier Strategy

Challenge yourself on this topic → Study as cards