Study. uk . com
  1. Home
  2. All questions
  3. Question 924

CISM study material · question 924 of 1000

Which check does NIST require when evaluating whether an alternate site is adequate?

  1. That the staff who work at the alternate site all hold exactly the same security clearances as the organisation own staff do today
  2. That the controls in place at the alternate site exceed every single one of those that are in place at the organisation's own primary site at present
  3. That the system's management, operational and technical security controls are compatible with what the site can provide
  4. That the site holds an independent certification against a recognised security standard that has been issued by an accredited body
Show the answer

Answer: C. That the system's management, operational and technical security controls are compatible with what the site can provide

SP 800-34r1 states the security, management, operational and technical controls of the system must be evaluated for compatibility with what the alternate site can provide.

Source: NIST SP 800-34 Rev. 1 (NIST) — Sec. 3.4.3 Alternate Sites

Challenge yourself on this topic → Study as cards