Study. uk . com
  1. Home
  2. All questions
  3. Question 542

CISM study material · question 542 of 1000

Two organisations run the same application but select different control mixes. Which two factors does NIST say determine the appropriate blend? Choose two.

  1. The role the system plays in supporting that mission
  2. The configuration that the vendor recommends for the product it supplies
  3. The number of users of the system itself
  4. The organisation's mission
Show the answer

Answer: D. The organisation's mission
A. The role the system plays in supporting that mission

SP 800-100 ties the control mix to what the organisation exists to do and to the part this particular system plays in supporting it. Two organisations therefore land differently.

Source: NIST SP 800-100 (NIST) — Sec. 12.2 Selecting Information Security Services

Challenge yourself on this topic → Study as cards