Study. uk . com
  1. Home
  2. All questions
  3. Question 619

CISM study material · question 619 of 1000

Which two statements about defining a system's security boundary are correct under NIST guidance? Choose two.

  1. Boundaries must align with network segments
  2. Resources so grouped should generally be under the same direct management control
  3. Boundaries are set by the authorising official without owner input
  4. Uniquely assigning information resources to a system is what defines its boundary
Show the answer

Answer: D. Uniquely assigning information resources to a system is what defines its boundary
B. Resources so grouped should generally be under the same direct management control

SP 800-100 states the process of uniquely assigning information resources to a system defines the security boundary for that system, and that if a set of resources is identified as a system they should generally be under the same direct management control.

Source: NIST SP 800-100 (NIST) — Sec. 8.4.1 System Boundary Analysis

Challenge yourself on this topic → Study as cards