Study. uk . com
  1. Home
  2. All questions
  3. Question 582

CISM study material · question 582 of 1000

Which two sources of change initiation does NIST identify beyond users and system owners? Choose two.

  1. Audit findings
  2. Other reviews
  3. The vendor's release calendar
  4. The organisation's budget cycle
Show the answer

Answer: A. Audit findings
B. Other reviews

SP 800-100 notes changes come from people — users, system owners — and also surface from audit findings and other reviews.

Source: NIST SP 800-100 (NIST) — Sec. 14.3 Step 1 Identify Change

Challenge yourself on this topic → Study as cards