Study. uk . com
  1. Home
  2. All questions
  3. Question 627

CISM study material · question 627 of 1000

Which two scopes can a common control cover, according to NIST? Choose two.

  1. Only those systems that are categorised at the same impact level
  2. A group of systems at a specific site
  3. Common hardware, software or firmware deployed at multiple operational sites
  4. Only those systems owned by a single business unit
Show the answer

Answer: B. A group of systems at a specific site
C. Common hardware, software or firmware deployed at multiple operational sites

SP 800-100 states common controls can apply to all organisational systems, to a group of systems at a specific site, or to common systems, subsystems or applications such as common hardware, software or firmware deployed at multiple operational sites.

Source: NIST SP 800-100 (NIST) — Sec. 8.4.5 Common Security Controls

Challenge yourself on this topic → Study as cards