Study. uk . com
  1. Home
  2. All questions
  3. Question 497

CISM study material · question 497 of 1000

An organisation wants security requirements to be more than a post-award discussion with the winning bidder. Which mechanism does NIST describe?

  1. Making satisfaction of the applicable security requirements a qualifying condition for award
  2. Adding a security annex to the contract after signature, once the winning bidder's own capabilities are properly known
  3. Deferring the security requirements to the first contract renewal, when performance data will be available to inform them
  4. Requiring the supplier to self-certify against the requirements within ninety days of the award being made to it
Show the answer

Answer: A. Making satisfaction of the applicable security requirements a qualifying condition for award

SP 800-161r1 makes meeting the applicable security requirements a condition a bidder must satisfy to qualify for award, rather than something negotiated afterwards.

Source: NIST SP 800-161 Rev. 1 (NIST) — Sec. 3.1.2 The Role of C-SCRM in the Acquisition Process

Challenge yourself on this topic → Study as cards