Numerous information security standards promote good security practices and define frameworks or systems to structure the analysis and design for managing information security controls. Which of the…

The correct answer is A. SA System and Services Acquisition B. CA Certification, Accreditation, and Security Assessments C. IR Incident Response. The U.S. Federal Government information security standards are primarily defined in NIST Special Publication 800-53, which organizes security controls into families identified by two-letter abbreviations. SA (System and Services Acquisition), CA (Assessment, Authorization, and…

Selection and Approval of Framework, Security, and Privacy Controls

Question

Numerous information security standards promote good security practices and define frameworks or systems to structure the analysis and design for managing information security controls. Which of the following are the U.S. Federal Government information security standards? Each correct answer represents a complete solution. Choose all that apply.

Options

ASA System and Services Acquisition
BCA Certification, Accreditation, and Security Assessments
CIR Incident Response
DInformation systems acquisition, development, and maintenance

How the community answered

(37 responses)

A
92% (34)
D
8% (3)

Explanation

The U.S. Federal Government information security standards are primarily defined in NIST Special Publication 800-53, which organizes security controls into families identified by two-letter abbreviations. SA (System and Services Acquisition), CA (Assessment, Authorization, and Monitoring - previously Certification, Accreditation, and Security Assessments), and IR (Incident Response) are all control families within NIST SP 800-53 and are U.S. Federal Government standards. Option D - 'Information systems acquisition, development, and maintenance' - is a control domain from ISO/IEC 27001/27002, which is an international standard, not a U.S. federal government standard. This distinction is key for certification exams covering both NIST and ISO frameworks.

Topics

#NIST SP 800-53#Control Families#Federal Information Security Standards#Information Security Controls

Community Discussion

No community discussion yet for this question.

Full CAP Practice