Policies that were entirely adequate at approval are found three years later to be inadequate although nothing was formally changed. Which cause does NIST specifically name alongside changed mission and technology?

Question

Answer 1

Show the answer

Answer: A. Deterioration in the degree of compliance

SP 800-100 lists falling compliance alongside altered missions, threats, environments and technology as reasons a once-adequate policy stops working. Nothing has to be formally rewritten for a policy to go stale.

Source: NIST SP 800-100 (NIST) — Sec. 2.2.6 Ongoing Monitoring