Study. uk . com
  1. Home
  2. All questions
  3. Question 88

CISM study material · question 88 of 1000

Two organisations in a partnership want to build trust through transparency about risk. Which two mechanisms does SP 800-39 describe for achieving that? Choose two.

  1. Employing common security standards and specification language for controls
  2. Exchanging administrator credentials for each other's systems
  3. Publishing each other's incident reports externally
  4. Defining common artefacts and bodies of evidence used in risk decisions
Show the answer

Answer: A. Employing common security standards and specification language for controls
D. Defining common artefacts and bodies of evidence used in risk decisions

SP 800-39 says transparency is achieved by providing visibility into each other's risk and security activities through common security standards, specification language for controls, assessment procedures and risk methodologies, and common artefacts and evidence.

Source: NIST SP 800-39 (NIST) — Sec. 2.6 footnote 47

Challenge yourself on this topic → Study as cards