Study. uk . com
  1. Home
  2. All questions
  3. Question 256

CISSP study material · question 256 of 500

An architect asks how FIPS 140-3 relates to the international standards it is based on, and what adjusts those standards for federal use. Which answer is correct?

  1. It adopts ISO/IEC 27001, with SP 800-53 adjusting it for federal use.
  2. It adopts ISO/IEC 19790 and ISO/IEC 24759, with the SP 800-140x documents adjusting them for federal use.
  3. It restates the international requirements verbatim with no federal adjustment.
  4. It replaces the international standards, which were withdrawn on its publication.
Show the answer

Answer: B. It adopts ISO/IEC 19790 and ISO/IEC 24759, with the SP 800-140x documents adjusting them for federal use.

FIPS 140-3 became final in March 2019 and adopts ISO/IEC 19790 and ISO/IEC 24759 rather than writing requirements from scratch, with the SP 800-140x series tailoring them for federal use.

Source: NIST FIPS 140-3 (NIST) — FIPS 140-3 > Publication details and Planning Note (05/01/2019)

Challenge yourself on this topic → Study as cards