Study. uk . com
  1. Home
  2. All questions
  3. Question 657

CISM study material · question 657 of 1000

Why does NIST say interconnection agreements themselves need protection?

  1. Because they are subject to statutory retention periods that oblige the organisation to keep them for a fixed number of years after the link closes
  2. Because they must be produced for the annual audit
  3. Because they may contain sensitive information and must be protected against unauthorised disclosure, modification, damage or destruction
  4. Because copies are held by both organisations
Show the answer

Answer: C. Because they may contain sensitive information and must be protected against unauthorised disclosure, modification, damage or destruction

SP 800-100 notes both the agreement and the memorandum can hold sensitive detail, so the original and every copy need protecting from disclosure, alteration, damage and destruction.

Source: NIST SP 800-100 (NIST) — Sec. 6.2.1 Phase 1 Planning

Challenge yourself on this topic → Study as cards