- Home
- All questions
- Question 488
CISM study material · question 488 of 1000
Why does NIST place determination of criticality at the planning step of a procurement rather than later?
Show the answer
Answer: B. It shapes how much risk is tolerable, who takes part in planning, and which requirements apply
SP 800-161r1 establishes need and criticality during plan procurement, along with what drove that judgement, because those three downstream decisions all depend on it.
Source: NIST SP 800-161 Rev. 1 (NIST) — Sec. 3.1.2 The Role of C-SCRM in the Acquisition Process