Study. uk . com
  1. Home
  2. All questions
  3. Question 541

CISM study material · question 541 of 1000

Which two dependencies does NIST identify for operational security services? Choose two.

  1. They are always delivered by an external provider
  2. They operate independently of the system's function
  3. They rely on management activities and technical controls
  4. They often require technical or specialised expertise
Show the answer

Answer: D. They often require technical or specialised expertise

SP 800-100 describes operational services as focused on controls implemented and executed by people rather than systems, often requiring technical or specialised expertise and relying on management activities and technical controls.

Source: NIST SP 800-100 (NIST) — Table 12-2 Services Categories

Challenge yourself on this topic → Study as cards