Study. uk . com
  1. Home
  2. All questions
  3. Question 630

CISM study material · question 630 of 1000

What risk does NIST identify as arising from widespread dependence on common controls?

  1. Failure of such a control may result in a significant increase in organisation-level risk across all dependent systems
  2. Systems must be recategorised when a common control changes
  3. Inheriting systems lose the ability to demonstrate compliance
  4. Common controls become impossible to assess independently
Show the answer

Answer: A. Failure of such a control may result in a significant increase in organisation-level risk across all dependent systems

SP 800-100 warns that because of the potential dependence on common controls by many of an organisation's systems, a failure of such controls may result in a significant increase in organisation-level risk arising from operating the dependent systems.

Source: NIST SP 800-100 (NIST) — Sec. 8.4.5 Common Security Controls

Challenge yourself on this topic → Study as cards