Study. uk . com
  1. Home
  2. All questions
  3. Question 646

CISM study material · question 646 of 1000

Why does NIST require each interconnected system's controls to be evaluated against the other's requirements?

  1. Because both of the systems must share the same authorising official once they have been connected
  2. Because the weaker end of the connection sets the effective protection for both
  3. Because the agreement cannot be signed otherwise
  4. Because the control baselines must be identical
Show the answer

Answer: B. Because the weaker end of the connection sets the effective protection for both

SP 800-100 states the controls of each interconnected system should be evaluated and meet each other's requirements for implementing controls appropriate for that interconnection, with both organisations specifying their requirements.

Source: NIST SP 800-100 (NIST) — Sec. 6.1 Managing System Interconnections

Challenge yourself on this topic → Study as cards