Study. uk . com
  1. Home
  2. All questions
  3. Question 697

CISM study material · question 697 of 1000

Which two conditions does NIST say organisation-level measurement requires? Choose two.

  1. Every one of the business units in the organisation uses exactly the same tooling
  2. Every one of the measures is collected automatically
  3. Data is available across the organisation
  4. Processes on which the measures depend are consistent and repeatable
Show the answer

Answer: D. Processes on which the measures depend are consistent and repeatable
C. Data is available across the organisation

SP 800-55v1 attaches two conditions to measuring at organisation level: the underlying processes behave the same way each time, and the data can actually be had across the whole organisation.

Source: NIST SP 800-55 Vol. 1 (NIST) — Ch. 3 Measurement Considerations

Challenge yourself on this topic → Study as cards