Study. uk . com
  1. Home
  2. All questions
  3. Question 487

CISM study material · question 487 of 1000

Which two participants does NIST say must be on the acquisition team so the security view is present when requirements are set? Choose two.

  1. The external auditor that the organisation has appointed
  2. Representatives from the supply and procurement communities
  3. A representative of the incumbent supplier that currently holds the contract
  4. Personnel with technical and security expertise
Show the answer

Answer: D. Personnel with technical and security expertise
B. Representatives from the supply and procurement communities

SP 800-161r1 puts programme officials, people with technical and security expertise, and the supply and procurement communities on the acquisition team together, so requirements are set with all views present.

Source: NIST SP 800-161 Rev. 1 (NIST) — Sec. 3.1.2 The Role of C-SCRM in the Acquisition Process

Challenge yourself on this topic → Study as cards