Study. uk . com
  1. Home
  2. All questions
  3. Question 554

CISM study material · question 554 of 1000

Which two organisational considerations does NIST list before selecting a security product? Choose two.

  1. Establishing the vendor's published support hours each day
  2. Benchmarking the product against the pricing offered by its competitors
  3. Identifying the anticipated user community
  4. Identifying the sensitivity of the data to be protected
Show the answer

Answer: C. Identifying the anticipated user community
D. Identifying the sensitivity of the data to be protected

SP 800-100's organisational considerations include identifying the user community, defining the relationship between the product and the mission, identifying data sensitivity and security requirements, reviewing the security plan, and identifying operational issues.

Source: NIST SP 800-100 (NIST) — Table 12-5 Product Selection Considerations

Challenge yourself on this topic → Study as cards