Study. uk . com
  1. Home
  2. All questions
  3. Question 531

CISM study material · question 531 of 1000

Which two responsibilities does NIST assign to an ordinary system user? Choose two.

  1. Approving the access requests raised by any of the other members of their own local team
  2. Using the organisation's technology resources only for defined purposes
  3. Reporting anomalous or suspicious system behaviour
  4. Assessing the security impact of each of the proposed changes
Show the answer

Answer: B. Using the organisation's technology resources only for defined purposes
C. Reporting anomalous or suspicious system behaviour

SP 800-50r1 gives users three duties: follow acceptable use policy, put the organisation's technology only to the purposes it was provided for, and raise anything the system does that looks odd.

Source: NIST SP 800-50 Rev. 1 (NIST) — Sec. 1.6.5 System User

Challenge yourself on this topic → Study as cards