Study. uk . com
  1. Home
  2. All questions
  3. Question 578

CISM study material · question 578 of 1000

Which two responsibilities does NIST assign to the configuration control review board? Choose two.

  1. Resolving change requests that require additional funding or resources
  2. Notifying users when a change is implemented
  3. Ensuring change requests do not adversely affect related systems, subsystems and facilities
  4. Performing the impact analysis for every change
Show the answer

Answer: A. Resolving change requests that require additional funding or resources
C. Ensuring change requests do not adversely affect related systems, subsystems and facilities

SP 800-100 lists the board's responsibilities as discussing and resolving change requests requiring additional funding or resources, ensuring requests do not adversely affect related systems, subsystems and facilities, and evaluating configuration metric information.

Source: NIST SP 800-100 (NIST) — Sec. 14.2 CM Roles and Responsibilities

Challenge yourself on this topic → Study as cards