Study. uk . com
  1. Home
  2. All questions
  3. Question 640

CISM study material · question 640 of 1000

Which coordination duty does NIST assign to the senior information security officer in security planning?

  1. Assessing the controls described in each one of the plans and then reporting the results of all those assessments to the authorising official for decision
  2. Approving each one of the system security plans on the organisation's behalf once the system owner has signed it and the assessor has confirmed all of the supporting evidence for it
  3. Writing each one of the system security plans personally on behalf of the owner of the system that it describes, using whatever evidence the owner supplies
  4. Coordinating the development, review and acceptance of system security plans with system owners, security officers and the authorising official
Show the answer

Answer: D. Coordinating the development, review and acceptance of system security plans with system owners, security officers and the authorising official

SP 800-100 has the senior security officer bring system owners, system security officers and the authorising official together over the writing, review and acceptance of system security plans.

Source: NIST SP 800-100 (NIST) — Sec. 8.2.4 Senior Agency Information Security Officer

Challenge yourself on this topic → Study as cards