Study. uk . com
  1. Home
  2. All questions
  3. Question 647

CISM study material · question 647 of 1000

Which two purposes does NIST give for maintaining clear lines of communication between interconnected parties? Choose two.

  1. Enabling prompt notification of security incidents and system disruptions with coordinated response
  2. Permitting the routine exchange of the administrator credentials between the two parties that hold the link
  3. Allowing either of the two parties to audit the other at any time at all without giving any prior written notice of it
  4. Making it easy for each side to notify the other about planned changes affecting the interconnection
Show the answer

Answer: D. Making it easy for each side to notify the other about planned changes affecting the interconnection
A. Enabling prompt notification of security incidents and system disruptions with coordinated response

SP 800-100 states clear communication ensures the interconnection is properly maintained and controls remain effective, facilitates change management by easing notification of planned changes, and enables prompt notification of incidents and disruptions with coordinated response.

Source: NIST SP 800-100 (NIST) — Sec. 6.1 Managing System Interconnections

Challenge yourself on this topic → Study as cards