Study. uk . com
  1. Home
  2. All questions
  3. Question 633

CISM study material · question 633 of 1000

What does scoping guidance provide, and what must the security plan record about its use?

  1. Terms on which individual baseline controls apply, with the plan identifying which controls used scoping guidance and the considerations made
  2. The inheritance path for each control, with the plan recording the provider
  3. The order in which the controls are to be implemented, with the plan recording the schedule agreed for each of them and the dependencies that run between them
  4. The assessment method for each control, with the plan recording the assessor
Show the answer

Answer: A. Terms on which individual baseline controls apply, with the plan identifying which controls used scoping guidance and the considerations made

SP 800-100 states scoping guidance provides specific terms and conditions on the applicability and implementation of individual controls in the baselines, and that plans should clearly identify which controls used scoping guidance and describe the considerations made.

Source: NIST SP 800-100 (NIST) — Sec. 8.4.3 Scoping Guidance

Challenge yourself on this topic → Study as cards