Study. uk . com
  1. Home
  2. All questions
  3. Question 192

CISSP study material · question 192 of 500

A privacy team wants to know how the protection owed to a given piece of personal data is pegged to a wider federal scale. Which relationship does NIST SP 800-122 set out?

  1. It works from a PII confidentiality impact level and names FIPS 199 among its key concepts.
  2. It works from the record retention schedule approved by the archives authority.
  3. It works from the control baseline selected under SP 800-53.
  4. It works from the system's authorisation boundary as defined in SP 800-37.
Show the answer

Answer: A. It works from a PII confidentiality impact level and names FIPS 199 among its key concepts.

SP 800-122 categorises personal data by a PII confidentiality impact level and references FIPS 199, so protection is pegged to the federal impact scale while remaining distinct from it.

Source: NIST SP 800-122 (NIST) — SP 800-122 > Keywords

Challenge yourself on this topic → Study as cards