Study. uk . com
  1. Home
  2. All questions
  3. Question 579

CISM study material · question 579 of 1000

Which two daily configuration management duties does NIST assign to the configuration manager? Choose two.

  1. Conducting impact analysis of changes and approving, denying or deferring them
  2. Serving as the standing authority on the system's own functional requirements and its design
  3. Ensuring an audit trail of changes is documented and maintained
  4. Approving the system's own authorisation to operate on the live network
Show the answer

Answer: A. Conducting impact analysis of changes and approving, denying or deferring them
C. Ensuring an audit trail of changes is documented and maintained

SP 800-100 lists the configuration manager's daily activities as documenting and implementing the plan, establishing baselines, managing change requests, conducting impact analysis, approving denying or deferring changes, notifying users, and ensuring an audit trail is maintained.

Source: NIST SP 800-100 (NIST) — Sec. 14.2 CM Roles and Responsibilities

Challenge yourself on this topic → Study as cards