Study. uk . com
  1. Home
  2. All questions
  3. Question 608

CISM study material · question 608 of 1000

A small organisation assigns one individual to several security planning roles. Which caution does NIST give?

  1. The roles must be rotated every twelve months
  2. The arrangement is prohibited regardless of the size of the organisation or of the particular roles being combined
  3. Care is needed to preserve an appropriate level of independence and avoid conflicts of interest
  4. The individual must hold a recognised professional certification before any of these roles may be combined
Show the answer

Answer: C. Care is needed to preserve an appropriate level of independence and avoid conflicts of interest

SP 800-100 permits role stacking but asks for care that the person keeps an appropriate degree of independence and does not fall into a conflict of interest.

Source: NIST SP 800-100 (NIST) — Sec. 8.2 Security Planning Roles

Challenge yourself on this topic → Study as cards