Study. uk . com
  1. Home
  2. All questions
  3. Question 556

CISM study material · question 556 of 1000

Which two vendor considerations does NIST list for security product selection? Choose two.

  1. The vendor's level of participation in the industry conferences held during the year
  2. Whether selecting the product will limit future security choices
  3. The vendor's history in responding to security flaws in its products
  4. The vendor's total number of customers worldwide at the time of the purchase
Show the answer

Answer: B. Whether selecting the product will limit future security choices
C. The vendor's history in responding to security flaws in its products

SP 800-100 gives three vendor considerations: whether a product would close off the organisation later security options, how experienced and viable the vendor is, and what it has done historically once flaws were found in what it sells.

Source: NIST SP 800-100 (NIST) — Table 12-5 Product Selection Considerations

Challenge yourself on this topic → Study as cards