Study. uk . com
  1. Home
  2. All questions
  3. Question 577

CISM study material · question 577 of 1000

Which two configuration management responsibilities does NIST assign to the system owner? Choose two.

  1. Approving or denying each of the individual change requests raised against the system from day to day
  2. Maintaining the audit trail covering all of the changes that are made to the system
  3. Developing functional requirements and verifying they are implemented appropriately
  4. Serving as the authority for all configuration matters for that system
Show the answer

Answer: D. Serving as the authority for all configuration matters for that system
C. Developing functional requirements and verifying they are implemented appropriately

SP 800-100 states the system owner serves as the authority for all matters of configuration management for the system and is responsible for developing functional requirements and verifying that they are implemented appropriately.

Source: NIST SP 800-100 (NIST) — Sec. 14.2 CM Roles and Responsibilities

Challenge yourself on this topic → Study as cards