Study. uk . com
  1. Home
  2. All questions
  3. Question 551

CISM study material · question 551 of 1000

Which two questions does NIST direct at a provider that will hold the organisation's data alongside other customers'? Choose two.

  1. Which other customers occupy the same shared infrastructure, named individually in the contract
  2. What processes are in place to ensure the organisation's data is protected
  3. What each other customer pays for the same service
  4. How the provider addresses the commingling of data with other organisations' data
Show the answer

Answer: D. How the provider addresses the commingling of data with other organisations' data
B. What processes are in place to ensure the organisation's data is protected

SP 800-100's policy and process considerations include how the provider addresses the commingling of its data with that of another organisation and whether processes are in place to ensure an organisation's data is protected.

Source: NIST SP 800-100 (NIST) — Table 12-4 General Considerations

Challenge yourself on this topic → Study as cards