Study. uk . com
  1. Home
  2. All questions
  3. Question 408

CISSP study material · question 408 of 500

A vendor supplies only a high-level design summary for a product under development. What does SP 800-53A say this limits?

  1. The scoring, since determination statements cannot be recorded as satisfied.
  2. The assessment methods available, since examine cannot be used without full documentation.
  3. The coverage of the assessment, since fewer objects can be sampled.
  4. The depth of developmental assurance, since the detail in artifacts decides what testing and analysis is possible.
Show the answer

Answer: D. The depth of developmental assurance, since the detail in artifacts decides what testing and analysis is possible.

Developmental depth rests on the rigour and detail of design and development artifacts, and that detail decides what testing and analysis can be done at all.

Source: NIST SP 800-53A Rev. 5 (NIST) — SP 800-53A Rev. 5 > 2.3 Building an Effective Assurance Case

Challenge yourself on this topic → Study as cards