Study. uk . com
  1. Home
  2. All questions
  3. Question 538

CISM study material · question 538 of 1000

Why does NIST ask programme managers to identify the triggers for a replacement security service in advance?

  1. Because the triggers for a replacement are required by all of the procurement regulations that apply to the organisation
  2. Because the environment usually changes such that a new and replacement service becomes necessary
  3. Because providers must be rotated at fixed intervals so that their independence from the estate is preserved
  4. Because service contracts carry a fixed maximum duration that cannot afterwards be extended by either party
Show the answer

Answer: B. Because the environment usually changes such that a new and replacement service becomes necessary

SP 800-100 notes it is more likely that the environment will change such that programme managers will identify triggers initiating a new and replacement information security service, rather than the service continuing indefinitely.

Source: NIST SP 800-100 (NIST) — Table 12-1 Services Life Cycle

Challenge yourself on this topic → Study as cards