Study. uk . com
  1. Home
  2. All questions
  3. Question 603

CISM study material · question 603 of 1000

Which architectural question does SP 800-37 give as an example for an organisation-level risk assessment?

  1. Whether the network diagram is up to date
  2. Whether all systems use the same authentication provider
  3. Whether every system has a documented owner
  4. Whether higher impact systems are segregated from lower impact systems residing on the same network
Show the answer

Answer: D. Whether higher impact systems are segregated from lower impact systems residing on the same network

SP 800-37 offers this as an organisation-level question: with systems of different impact levels sharing a network, has the architecture kept the higher-impact ones apart from the rest?

Source: NIST SP 800-37 Rev. 2 (NIST) — Task P-3 Risk Assessment — Organization

Challenge yourself on this topic → Study as cards