CAS-002 Question #851: Real Exam Question with Answer & Explanation

The correct answer is C: MOU. An MOU (Memorandum of Understanding) is the appropriate document to clarify shared or overlapping roles and responsibilities between two internal teams or organizations.

Question

An employee is performing a review of the organization's security functions and noticed that there is some cross over responsibility between the IT security team and the financial fraud team. Which of the following security documents should be used to clarify the roles and responsibilities between the teams?

Options

ABPA
BBIA
CMOU
DOLA

Explanation

An MOU (Memorandum of Understanding) is the appropriate document to clarify shared or overlapping roles and responsibilities between two internal teams or organizations.

Common mistakes.

A. A BPA (Business Partnership Agreement) is a formal legal agreement between business partners that governs financial and operational arrangements, not internal team responsibilities.
B. A BIA (Business Impact Analysis) identifies and quantifies the effects of disruptions on business operations and is used for continuity planning, not for defining team roles.
D. An OLA (Operational Level Agreement) defines internal IT service delivery commitments between IT support groups, not for clarifying security responsibilities across different business units.

Concept tested. Memorandum of Understanding for role clarification

Reference. https://csrc.nist.gov/publications/detail/sp/800-47/rev-1/final

Community Discussion

No community discussion yet for this question.

Full CAS-002 Practice