Study. uk . com
  1. Home
  2. All questions
  3. Question 545

CISM study material · question 545 of 1000

Which two of NIST's six issue categories for acquiring security services are correct? Choose two.

  1. Legal and contractual
  2. Strategic and mission
  3. Policy and process
  4. Environmental and physical
Show the answer

Answer: B. Strategic and mission
C. Policy and process

SP 800-100 groups issues into six categories: strategic and mission, budgetary and funding, technical and architectural, organisational, personnel, and policy and process.

Source: NIST SP 800-100 (NIST) — Table 12-3 Service Issue Categories

Challenge yourself on this topic → Study as cards