- Home
- All questions
- Question 83
CISM study material · question 83 of 1000
A supplier the organisation trusts subcontracts part of the work to a firm the organisation has never assessed, and argues that its own trusted status should carry over. Which property of trust rebuts this?
Show the answer
Answer: A. Trust is generally not transitive
SP 800-39 states trust is generally not transitive: trusting one party does not oblige an organisation to trust the parties that party in turn trusts, which is why subcontractors need their own assessment.
Source: NIST SP 800-39 (NIST) — Sec. 2.6 Trust and Trustworthiness