Study. uk . com
  1. Home
  2. All questions
  3. Question 467

CISM study material · question 467 of 1000

Which three things does system-level continuous monitoring address under SP 800-137?

  1. Detecting, containing and eradicating each of the incidents that the monitoring programme identifies
  2. Assessing controls for effectiveness, monitoring security status, and reporting findings
  3. Framing, assessing and responding to the risk that each individual system carries for the wider organisational mission
  4. Categorising, selecting and implementing all of the controls that the system will go on to operate
Show the answer

Answer: B. Assessing controls for effectiveness, monitoring security status, and reporting findings

SP 800-137 states system-level ISCM addresses monitoring security controls for effectiveness through assessments, monitoring for security status, and reporting findings.

Source: NIST SP 800-137 (NIST) — Sec. 3.1.2 Information System Tier Strategy

Challenge yourself on this topic → Study as cards