Study. uk . com
  1. Home
  2. All questions
  3. Question 562

CISM study material · question 562 of 1000

What does NIST identify as the purpose of configuration management in security terms?

  1. Managing the effect of changes and preventing changes that would damage the security posture before they happen
  2. Assigning ownership of each system component
  3. Scheduling maintenance windows for each system
  4. Recording the asset inventory for audit purposes, so that the organisation can show what it operates when an assessor asks for it
Show the answer

Answer: A. Managing the effect of changes and preventing changes that would damage the security posture before they happen

SP 800-100 states the purpose of configuration management is to manage the effects of changes or differences in configurations, streamlining change processes and preventing changes that could detrimentally affect the security posture before they happen.

Source: NIST SP 800-100 (NIST) — Ch. 14 Configuration Management

Challenge yourself on this topic → Study as cards