Study. uk . com
  1. Home
  2. All questions
  3. Question 600

CISM study material · question 600 of 1000

Which two organisation-level RMF Prepare tasks does SP 800-37 name? Choose two.

  1. Categorising each of the individual systems in the whole estate
  2. Developing and implementing an organisation-wide continuous monitoring strategy
  3. Assessing the controls that have been implemented on each of the systems that are in the scope
  4. Identifying common controls available for inheritance
Show the answer

Answer: D. Identifying common controls available for inheritance
B. Developing and implementing an organisation-wide continuous monitoring strategy

SP 800-37's organisation-level Prepare tasks are risk management roles, risk management strategy, organisation-wide risk assessment, tailored control baselines and profiles, common control identification, impact-level prioritisation, and the organisation-wide monitoring strategy.

Source: NIST SP 800-37 Rev. 2 (NIST) — Table 1 Prepare Tasks — Organization Level

Challenge yourself on this topic → Study as cards