Study. uk . com
  1. Home
  2. All questions
  3. Question 580

CISM study material · question 580 of 1000

What is the information systems security officer's role in relation to the configuration control board?

  1. Implementing every approved change personally, so that the security implications are handled by the person who understands them
  2. Maintaining the board's records and minutes
  3. Addressing the programme's security concerns and providing expertise and decision support to the board
  4. Chairing the board and casting the deciding vote whenever the members cannot agree on whether a change should proceed
Show the answer

Answer: C. Addressing the programme's security concerns and providing expertise and decision support to the board

SP 800-100 makes the information systems security officer the person who carries the programme's security concerns and who supplies expertise and decision support to the review board.

Source: NIST SP 800-100 (NIST) — Sec. 14.2 CM Roles and Responsibilities

Challenge yourself on this topic → Study as cards