Study. uk . com
  1. Home
  2. All questions
  3. Question 620

CISM study material · question 620 of 1000

How does NIST define a subsystem?

  1. A group of systems that sit under a single authorising official and share one authorisation decision between all of them at the same time
  2. A system that inherits all of its controls from another system and holds no controls of its own inside its own boundary at all
  3. Any application that runs on a shared platform alongside other applications that are owned and operated elsewhere entirely
  4. A major subdivision of a system made up of information, technology and people carrying out particular functions
Show the answer

Answer: D. A major subdivision of a system made up of information, technology and people carrying out particular functions

SP 800-100 treats a subsystem as a major component within a system, combining information, technology and personnel to deliver one or more specific functions.

Source: NIST SP 800-100 (NIST) — Sec. 8.4.1 System Boundary Analysis

Challenge yourself on this topic → Study as cards