Study. uk . com
  1. Home
  2. All questions
  3. Question 400

CISSP study material · question 400 of 500

Who uses the findings produced by applying an assessment procedure, and for what decision?

  1. The authorising official, in deciding whether the system may begin or continue operating.
  2. The system administrator, in deciding which patches to deploy first.
  3. The control assessor, in deciding which further procedures to run.
  4. The common control provider, in deciding which controls to inherit.
Show the answer

Answer: A. The authorising official, in deciding whether the system may begin or continue operating.

Findings show, or help determine, how effective the control is, and inform the authorising official's risk-based decision to start or continue operating the system.

Source: NIST SP 800-53A Rev. 5 (NIST) — SP 800-53A Rev. 5 > 2.4 Assessment Procedures

Challenge yourself on this topic → Study as cards