Study. uk . com
  1. Home
  2. All questions
  3. Question 98

CISM study material · question 98 of 1000

Servers are being retired and sent for disposal. Which two actions does SP 800-39 expect at this life cycle phase? Choose two.

  1. Assessing the risk associated with the disposal activities themselves
  2. Verifiably removing information whose compromise would cause adverse impact
  3. Transferring the system's common controls to a successor system so that inheritance continues uninterrupted
  4. Reauthorising the system for a further period of operation before it is removed
Show the answer

Answer: B. Verifiably removing information whose compromise would cause adverse impact
A. Assessing the risk associated with the disposal activities themselves

SP 800-39 states that during disposal, organisations verifiably remove any information that could cause adverse impacts if compromised, and also assess the risk associated with those disposal activities.

Source: NIST SP 800-39 (NIST) — Sec. 2.5 Tier Three — Information Systems View

Challenge yourself on this topic → Study as cards