Study. uk . com
  1. Home
  2. All questions
  3. Question 575

CISM study material · question 575 of 1000

A significant change is identified through the configuration management process. What does NIST say must follow?

  1. The system must be decommissioned and rebuilt
  2. The system must be recertified and reaccredited rather than continuing under its existing authorisation
  3. The change must be reversed until the next authorisation cycle
  4. The change must be documented and the authorisation continues unchanged
Show the answer

Answer: B. The system must be recertified and reaccredited rather than continuing under its existing authorisation

SP 800-100 states that in the operations and maintenance phase, if there was a significant change addressed in the configuration management process then the system must be recertified and reaccredited.

Source: NIST SP 800-100 (NIST) — Sec. 14.1 CM in the System Development Life Cycle

Challenge yourself on this topic → Study as cards