Study. uk . com
  1. Home
  2. All questions
  3. Question 583

CISM study material · question 583 of 1000

Which two questions does NIST's impact analysis of a change request ask? Choose two.

  1. Whether this same change has been requested at any point before
  2. Whether the requester holds sufficient seniority to raise a change of that size
  3. Whether system security will be affected by the change
  4. Whether it is technically sound, actually needed, and achievable inside the system's constraints
Show the answer

Answer: D. Whether it is technically sound, actually needed, and achievable inside the system's constraints
C. Whether system security will be affected by the change

SP 800-100's impact analysis asks whether the change is viable and improves performance or security, whether it is sound, needed and achievable, whether security is touched, and whether costs were weighed.

Source: NIST SP 800-100 (NIST) — Sec. 14.3 Step 2 Evaluate Change Request

Challenge yourself on this topic → Study as cards