Study. uk . com
  1. Home
  2. All questions
  3. Question 86

CISM study material · question 86 of 1000

An organisation is preparing to rely on an external service provider. Which two things does SP 800-39 say it must establish? Choose two.

  1. How the services or information will be protected in line with its own security requirements
  2. The provider's internal salary structure and its annual staff retention rates by grade
  3. The degree of control or influence it has over the external organisation
  4. The provider's marketing roadmap for the next three years, so that the organisation can plan around product changes
Show the answer

Answer: C. The degree of control or influence it has over the external organisation
A. How the services or information will be protected in line with its own security requirements

SP 800-39 asks organisations to define the services or information involved, establish the degree of control or influence they have over the external party, and describe how that material is protected to their security requirements.

Source: NIST SP 800-39 (NIST) — Sec. 2.6.1 Establishing Trust Among Organizations

Challenge yourself on this topic → Study as cards