Study. uk . com
  1. Home
  2. All questions
  3. Question 457

CISSP study material · question 457 of 500

An alternate site offers ample space, power and connectivity but cannot meet the system's access control and monitoring requirements. What does NIST SP 800-34 say about accepting it?

  1. The site is acceptable because contingency operations are exempt from control requirements.
  2. The site is acceptable for systems categorised moderate but not high.
  3. The site must satisfy the system's security, management, operational and technical requirements as well as its physical needs.
  4. The site is acceptable provided compensating controls are documented at activation.
Show the answer

Answer: C. The site must satisfy the system's security, management, operational and technical requirements as well as its physical needs.

SP 800-34 says that as sites are evaluated the coordinator should ensure the system's security, management, operational and technical requirements are met, not only the facility's capacity.

Source: NIST SP 800-34 Rev. 1 (NIST) — SP 800-34 Rev. 1 > 3.4.3 Alternate Site

Challenge yourself on this topic → Study as cards