Study. uk . com
  1. Home
  2. All questions
  3. Question 25

CISSP study material · question 25 of 500

A programme manager claims the systems security engineering principles in SP 800-160 Vol. 1 Rev. 1 suit large defence platforms only, so a small sensor gateway that has already been fielded sits outside their scope. How should the security architect answer?

  1. The principles hold whatever the system's purpose, size or complexity, and at any stage of its life cycle.
  2. The principles hold only where system complexity justifies formal engineering effort, which a small gateway falls below.
  3. The principles hold for a system of any size, but only where the mission is safety critical, which a sensor gateway is not.
  4. The principles hold for a system of any size, but only while it is being designed and built, so the gateway is past them.
Show the answer

Answer: A. The principles hold whatever the system's purpose, size or complexity, and at any stage of its life cycle.

The principles hold regardless of purpose, size or complexity and across the whole life cycle; a fielded gateway stays in scope, since operation is itself a life cycle stage.

Source: NIST SP 800-160 Vol. 1 Rev. 1 (NIST) — SP 800-160 Vol. 1 Rev. 1 > Abstract

Challenge yourself on this topic → Study as cards