Study. uk . com
  1. Home
  2. All questions
  3. Question 660

CISM study material · question 660 of 1000

Which two items does NIST say an interconnection implementation plan must identify? Choose two.

  1. The sensitivity or classification level of data crossing the interconnection
  2. Test procedures and measurement criteria confirming the interconnection operates properly and securely
  3. The commercial value of all of the data that is being exchanged over the link each month
  4. The names of every one of the individual users who will be given access to the connection once it has finally gone live
Show the answer

Answer: A. The sensitivity or classification level of data crossing the interconnection
B. Test procedures and measurement criteria confirming the interconnection operates properly and securely

SP 800-100 states the implementation plan should describe the systems, identify data sensitivity, identify responsible personnel, identify tasks and procedures, describe protective controls, provide test procedures and measurement criteria, specify training requirements, and cite relevant documentation.

Source: NIST SP 800-100 (NIST) — Sec. 6.2.2 Phase 2 Establishing

Challenge yourself on this topic → Study as cards