Study. uk . com
  1. Home
  2. All questions
  3. Question 470

CISM study material · question 470 of 1000

What role does SP 800-137 give to metrics and dashboards at the upper tiers of an organisation?

  1. Satisfying the requirement for independent assessment
  2. Providing the authoritative record on which each of the authorisation decisions is finally taken by the official
  3. Replacing system-level assessment with aggregated indicators
  4. Assessing, normalising, communicating and correlating the monitoring activity happening below them
Show the answer

Answer: D. Assessing, normalising, communicating and correlating the monitoring activity happening below them

SP 800-137 puts metrics and dashboards to work above the mission tier, where they judge, normalise, communicate and correlate what is being monitored underneath into something senior readers can use.

Source: NIST SP 800-137 (NIST) — Sec. 2.1.2 Tier 2 Mission/Business Processes

Challenge yourself on this topic → Study as cards