Study. uk . com
  1. Home
  2. All questions
  3. Question 653

CISM study material · question 653 of 1000

Why does NIST say each party should consider reauthorising its system before establishing an interconnection?

  1. Making the connection may itself count as a significant change to the systems being joined
  2. Because reauthorisation is required annually in any case
  3. Because the interconnection creates a new system requiring its own authorisation
  4. Because the other party will demand evidence of current authorisation
Show the answer

Answer: A. Making the connection may itself count as a significant change to the systems being joined

SP 800-100 treats the new link as potentially a significant change, and asks each side to consider recertifying and reaccrediting first so that protections are confirmed still acceptable.

Source: NIST SP 800-100 (NIST) — Sec. 6.2.1 Phase 1 Planning

Challenge yourself on this topic → Study as cards