Study. uk . com
  1. Home
  2. All questions
  3. Question 584

CISM study material · question 584 of 1000

Which three decisions can conclude a change request under NIST's process?

  1. Implement, roll back, or document
  2. Approve, escalate, or archive
  3. Approve, deny, or defer pending further testing or analysis
  4. Accept, reject, or transfer
Show the answer

Answer: C. Approve, deny, or defer pending further testing or analysis

SP 800-100 states that once a change has been evaluated and tested, one of three actions is taken: approve, with implementation authorised; deny, an immediate refusal; or defer, postponing the decision pending further testing or analysis.

Source: NIST SP 800-100 (NIST) — Sec. 14.3 Step 3 Implementation Decision

Challenge yourself on this topic → Study as cards