Study. uk . com
  1. Home
  2. All questions
  3. Question 502

CISM study material · question 502 of 1000

What does NIST ask suppliers to provide with products, including hardware that carries logic?

  1. A certificate of origin for each component
  2. A copy of the vendor's internal security policy and the standards that support it
  3. A signed statement of the vendor's financial standing for the current year
  4. A software bill of materials complying with an approved protocol
Show the answer

Answer: D. A software bill of materials complying with an approved protocol

SP 800-161r1 expects a software bill of materials, conforming to approved protocols, to accompany products — software and logic-bearing hardware alike.

Source: NIST SP 800-161 Rev. 1 (NIST) — Sec. 3.1.1 Acquisition in the C-SCRM Strategy

Challenge yourself on this topic → Study as cards