Study. uk . com
  1. Home
  2. All questions
  3. Question 486

CISM study material · question 486 of 1000

A procurement for a security service is to be awarded on a lowest price technically acceptable basis. What does NIST advise?

  1. Use it, since technical acceptability already covers all of the security requirements that were written into the tender specification
  2. Use it only where more than three bidders respond, since competition on that scale drives the quality of the bids up without further intervention
  3. Use it only for products and never for services, since a product's security can be judged from its own written specification alone in almost every case
  4. Avoid that source selection process when purchasing technology products or services, because security is a critical factor
Show the answer

Answer: D. Avoid that source selection process when purchasing technology products or services, because security is a critical factor

SP 800-161r1 states security is a critical factor in procurement decisions and that for this reason enterprises should avoid using a lowest price technically acceptable source selection process when purchasing technology products or services.

Source: NIST SP 800-161 Rev. 1 (NIST) — Sec. 3.1.2 The Role of C-SCRM in the Acquisition Process

Challenge yourself on this topic → Study as cards