Study. uk . com
  1. Home
  2. All questions
  3. Question 611

CISM study material · question 611 of 1000

Which two responsibilities does NIST assign to the system owner in relation to the security plan? Choose two.

  1. Performing the independent assessment of the controls that the plan describes and then reporting the result to the official
  2. Ensuring the system is deployed and operated according to the agreed security requirements
  3. Approving the plan on behalf of the whole organisation once it has finally been completed and signed
  4. Developing the plan in coordination with information owners, administrators, security officers and end users
Show the answer

Answer: D. Developing the plan in coordination with information owners, administrators, security officers and end users
B. Ensuring the system is deployed and operated according to the agreed security requirements

SP 800-100 states the system owner develops the security plan in coordination with information owners, the system administrator, the security officer and functional end users, maintains it, and ensures the system is deployed and operated according to agreed requirements.

Source: NIST SP 800-100 (NIST) — Sec. 8.2.2 Information System Owner

Challenge yourself on this topic → Study as cards