Study. uk . com
  1. Home
  2. All questions
  3. Question 561

CISM study material · question 561 of 1000

Which two delivery arrangements does NIST identify for a security service, beyond a commercial provider? Choose two.

  1. A peer organisation under a reciprocal agreement
  2. A group from a subsidiary organisation or another business unit
  3. A regulator-appointed assessor
  4. The organisation's own internal employees and teams
Show the answer

Answer: D. The organisation's own internal employees and teams
B. A group from a subsidiary organisation or another business unit

SP 800-100 states an organisation may select internal employees and teams to provide the required service, or fully export it to an external provider, which could be a group from a subsidiary organisation, a business unit, or a commercial provider.

Source: NIST SP 800-100 (NIST) — Sec. 12.2 Selecting Information Security Services

Challenge yourself on this topic → Study as cards