Study. uk . com
  1. Home
  2. All questions
  3. Question 639

CISM study material · question 639 of 1000

Which security planning duty does NIST assign to the chief information officer regarding controls the organisation offers for inheritance?

  1. Assessing each common control annually
  2. Identifying and developing the common controls for the organisation
  3. Approving each system's inheritance of common controls
  4. Documenting common controls in each system security plan
Show the answer

Answer: B. Identifying and developing the common controls for the organisation

SP 800-100 lists among the information officer's system security planning responsibilities managing the identification, implementation and assessment of common controls, and identifying and developing common security controls for the organisation.

Source: NIST SP 800-100 (NIST) — Sec. 8.2.1 Chief Information Officer

Challenge yourself on this topic → Study as cards