Study. uk . com
  1. Home
  2. All questions
  3. Question 629

CISM study material · question 629 of 1000

Which efficiency does NIST attribute to the common control approach?

  1. Assessment results for the common control can be reused to support the authorisation of every system that applies it
  2. Common controls do not need to appear in system security plans
  3. Common controls do not require assessment
  4. Common controls exempt inheriting systems from monitoring
Show the answer

Answer: A. Assessment results for the common control can be reused to support the authorisation of every system that applies it

SP 800-100 lets one assessment of a common control feed the certification and accreditation of every system on which that control has been applied — the saving the approach exists for.

Source: NIST SP 800-100 (NIST) — Sec. 8.4.5 Common Security Controls

Challenge yourself on this topic → Study as cards