Study. uk . com
  1. Home
  2. All questions
  3. Question 80

CISM study material · question 80 of 1000

A manager must explain what an authorisation boundary determines. Which answer is correct?

  1. The list of users authorised to access the system
  2. The network segments a system is permitted to communicate with, and therefore the traffic the boundary devices are configured to allow
  3. The scope of an authorisation — which system elements make up the system, or which common controls are available to inherit
  4. The physical perimeter of the facility housing the system, together with the areas inside it where the system's components may be sited
Show the answer

Answer: C. The scope of an authorisation — which system elements make up the system, or which common controls are available to inherit

SP 800-37 makes the authorisation boundary a statement of scope: for a system it fixes which elements are in it; for common controls it fixes which are on offer to inherit.

Source: NIST SP 800-37 Rev. 2 (NIST) — Sec. 2.1 footnote 23

Challenge yourself on this topic → Study as cards