Study. uk . com
  1. Home
  2. All questions
  3. Question 479

CISM study material · question 479 of 1000

An organisation forms a cross-functional supply chain risk team and disbands the risk responsibilities previously held within each discipline. What does NIST say about this?

  1. The team should consist solely of security practitioners
  2. The team leverages but does not replace responsibilities that should be specifically assigned to a discipline or business area
  3. The team should be advisory only, with no decision-making role
  4. The team must replace the disciplinary responsibilities entirely, so that the same risk is never assessed twice over by two different groups
Show the answer

Answer: B. The team leverages but does not replace responsibilities that should be specifically assigned to a discipline or business area

SP 800-161r1 states the coordinated team approach enables comprehensive multi-perspective analysis, but that the team leverages and does not replace those responsibilities and processes that should be specifically assigned to an enterprise or disciplinary area.

Source: NIST SP 800-161 Rev. 1 (NIST) — Sec. 2.3.1 Roles and Responsibilities

Challenge yourself on this topic → Study as cards