Study. uk . com
  1. Home
  2. All questions
  3. Question 612

CISM study material · question 612 of 1000

Which two things do rules of behaviour do, according to NIST? Choose two.

  1. List the technical controls implemented on each system
  2. State the consequences of behaviour inconsistent with the rules
  3. Are made available to every user before authorisation for access is granted
  4. Record the residual risk accepted for the system
Show the answer

Answer: B. State the consequences of behaviour inconsistent with the rules
C. Are made available to every user before authorisation for access is granted

SP 800-100 states rules of behaviour should clearly delineate responsibilities and expected behaviour of all individuals with access, state the consequences of inconsistent behaviour or non-compliance, and be made available to every user prior to receiving authorisation for access.

Source: NIST SP 800-100 (NIST) — Sec. 8.3 Rules of Behavior

Challenge yourself on this topic → Study as cards