Which of the following professionals plays the role of a monitor and takes part in the organization's configuration management process?

The correct answer is C. Common Control Provider. The Common Control Provider (C) is responsible for implementing, managing, and monitoring common security controls that are inherited by multiple information systems across the organization. As part of this role, they participate in configuration management to ensure controls rem

Compliance Maintenance

Question

Options

ASenior Agency Information Security Officer
BAuthorizing Official
CCommon Control Provider
DChief Information Officer

How the community answered

(36 responses)

B
3% (1)
C
92% (33)
D
6% (2)

Explanation

The Common Control Provider (C) is responsible for implementing, managing, and monitoring common security controls that are inherited by multiple information systems across the organization. As part of this role, they participate in configuration management to ensure controls remain effective as systems change. The Senior Agency Information Security Officer (A) advises the CIO. The Authorizing Official (B) grants or denies system authorization. The Chief Information Officer (D) oversees enterprise IT strategy - none of these have the specific monitoring and configuration management role that the Common Control Provider holds.

Topics

#Common Control Provider#Monitoring#Configuration Management#NIST RMF Roles

Community Discussion

No community discussion yet for this question.

Full CAP Practice