Study. uk . com
  1. Home
  2. All questions
  3. Question 478

CISM study material · question 478 of 1000

Which model does NIST recommend for distributing accountability in supply chain risk management?

  1. A shared responsibility model spreading responsibilities and accountabilities across a diverse group of stakeholders
  2. Accountability delegated entirely to the prime contractor, whose own subcontracts then carry the same obligations down the chain
  3. Sole accountability resting with the security office
  4. Sole accountability resting with the procurement function, which holds all the contracts and therefore holds all of the leverage
Show the answer

Answer: A. A shared responsibility model spreading responsibilities and accountabilities across a diverse group of stakeholders

SP 800-161r1 states effective implementations often include adoption of a shared responsibility model that distributes responsibilities and accountabilities for supply chain risk activities across a diverse group of stakeholders.

Source: NIST SP 800-161 Rev. 1 (NIST) — Sec. 2.3.1 Roles and Responsibilities

Challenge yourself on this topic → Study as cards