Study. uk . com
  1. Home
  2. All questions
  3. Question 648

CISM study material · question 648 of 1000

How often does NIST say the security controls on an interconnection should be reviewed?

  1. Only when a security incident has actually occurred on one of the two systems that the link joins together at either end
  2. Every three years, aligned to the reauthorisation cycle of the larger of the two connected systems here
  3. Yearly at minimum, plus after any significant change to either system or to how it operates
  4. Whenever either of the two parties formally requests a review of the connection running between them both
Show the answer

Answer: C. Yearly at minimum, plus after any significant change to either system or to how it operates

SP 800-100 asks one or both organisations to revisit the interconnection's controls at least once a year, and again whenever either system or its operating environment changes significantly.

Source: NIST SP 800-100 (NIST) — Sec. 6.1 Managing System Interconnections

Challenge yourself on this topic → Study as cards