CGRC · Question #122
Common activities within organizations can cause changes to systems or the environments of operation and can have significant impact on the security posture of systems. Which of the following is an…
The correct answer is A. Moving to a new facility. Moving to a new facility is an example of a change in an environment of operation, as it alters the physical and often logical context surrounding an information system, potentially impacting its security posture.
Question
Common activities within organizations can cause changes to systems or the environments of operation and can have significant impact on the security posture of systems. Which of the following is an example of change in an environment of operation? Response:
Options
- AMoving to a new facility
- BInstalling or disposing of hardware
- CMaking changes to configuration
- DInstalling patches outside of the established configuration change control process
How the community answered
(32 responses)- A94% (30)
- B3% (1)
- C3% (1)
Why each option
Moving to a new facility is an example of a change in an environment of operation, as it alters the physical and often logical context surrounding an information system, potentially impacting its security posture.
A change in the environment of operation refers to alterations in the external factors surrounding the information system, such as its physical location, environmental conditions, or external network connectivity. Moving to a new facility directly impacts the physical security, infrastructure, and potentially the network topology, thus constituting a change in the environment of operation.
Installing or disposing of hardware is a change to the system itself, not primarily its environment of operation.
Making changes to configuration is a modification within the system or its software, not typically a change to the broader operational environment.
Installing patches is a system modification, and doing it outside of established processes refers to a process failure, not a fundamental change in the operational environment.
Concept tested: Change in environment of operation
Source: https://csrc.nist.gov/glossary/term/environment_of_operation
Topics
Community Discussion
No community discussion yet for this question.