Study. uk . com
  1. Home
  2. All questions
  3. Question 566

CISM study material · question 566 of 1000

Which two things does the baseline configuration control require an organisation to maintain? Choose two.

  1. A record of every user's access rights
  2. A signed acceptance from each system user
  3. A current baseline configuration of the system
  4. An inventory of the system's constituent components
Show the answer

Answer: C. A current baseline configuration of the system
D. An inventory of the system's constituent components

The baseline configuration control has the organisation develop, document and keep current both a baseline configuration for the system and an inventory of the components making it up.

Source: NIST SP 800-100 (NIST) — Table 14-1 CM Control Family

Challenge yourself on this topic → Study as cards