Study. uk . com
  1. Home
  2. All questions
  3. Question 76

CISM study material · question 76 of 1000

A consolidation programme reduces the number of distinct platforms in the estate. Beyond cost, what security benefit does SP 800-37 attribute to consolidation, optimisation and standardisation?

  1. Elimination of the need for continuous monitoring, since a standardised estate behaves predictably enough to be assessed annually
  2. Automatic inheritance of every common control by the remaining systems, with no further tailoring required of their owners
  3. A lower security categorisation for the remaining systems, because consolidation spreads the impact of any single loss across fewer assets
  4. A reduced attack surface and technology footprint available for adversaries to exploit
Show the answer

Answer: D. A reduced attack surface and technology footprint available for adversaries to exploit

SP 800-37 notes that managing the complexity of systems through consolidation, optimisation and standardisation reduces the attack surface and the technology footprint exploitable by adversaries.

Source: NIST SP 800-37 Rev. 2 (NIST) — Sec. 2.1 Organization-Wide Risk Management

Challenge yourself on this topic → Study as cards