Study. uk . com
  1. Home
  2. All questions
  3. Question 644

CISM study material · question 644 of 1000

What does NIST require before an organisation connects its system to another system?

  1. A completed penetration test of the other system carried out within the last twelve months or so
  2. Written management authority, based on a level of risk both parties find acceptable
  3. A joint incident response plan signed by both of the parties before the link is enabled at all
  4. Approval from the regulator for the sector
Show the answer

Answer: B. Written management authority, based on a level of risk both parties find acceptable

SP 800-100 requires management authority in writing before a system is joined to another, granted on a level of risk both sides find acceptable.

Source: NIST SP 800-100 (NIST) — Sec. 6.1 Managing System Interconnections

Challenge yourself on this topic → Study as cards