CGRC · Question #109
At very least security status reporting should include a summary of key changes to security plans, security assessment reports & POAMs. Response:
The correct answer is A. True. It is true that security status reporting should at minimum summarize key changes to security plans, security assessment reports, and Plans of Action and Milestones (POAMs).
Question
At very least security status reporting should include a summary of key changes to security plans, security assessment reports & POAMs. Response:
Options
- ATrue
- BFalse
How the community answered
(44 responses)- A86% (38)
- B14% (6)
Why each option
It is true that security status reporting should at minimum summarize key changes to security plans, security assessment reports, and Plans of Action and Milestones (POAMs).
Effective security status reporting provides stakeholders with a clear overview of the organization's security posture. Including changes to security plans, the results of security assessments, and the status of POAMs is critical for demonstrating ongoing risk management, compliance, and the effectiveness of security controls.
Concept tested: Essential elements of security status reporting.
Source: https://csrc.nist.gov/publications/detail/sp/800-37/rev-2/final
Topics
Community Discussion
No community discussion yet for this question.