nerdexam
(ISC)2

CGRC · Question #226

Which NIST SP series document is concerned with continuous monitoring for federal information systems and organizations? Response:

The correct answer is C. SP 800-137. NIST Special Publication 800-137 provides comprehensive guidance for establishing and implementing information security continuous monitoring (ISCM) programs for federal information systems.

Compliance Maintenance

Question

Which NIST SP series document is concerned with continuous monitoring for federal information systems and organizations? Response:

Options

  • ASP 800-144
  • BSP 800-64
  • CSP 800-137
  • DSP 800-26

How the community answered

(38 responses)
  • B
    5% (2)
  • C
    92% (35)
  • D
    3% (1)

Why each option

NIST Special Publication 800-137 provides comprehensive guidance for establishing and implementing information security continuous monitoring (ISCM) programs for federal information systems.

ASP 800-144

NIST SP 800-144, "Guidelines on Security and Privacy in Public Cloud Computing," focuses on cloud security considerations.

BSP 800-64

NIST SP 800-64, "Security Considerations in the System Development Life Cycle," deals with integrating security into the SDLC.

CSP 800-137Correct

NIST SP 800-137, titled "Information Security Continuous Monitoring (ISCM) for Federal Information Systems and Organizations," specifically outlines the process for implementing and managing continuous monitoring to maintain ongoing awareness of an organization's security posture.

DSP 800-26

NIST SP 800-26, "Security Self-Assessment Guide for Information Technology Systems," provided guidance for self-assessments but is largely superseded by other documents.

Concept tested: NIST SP 800-137 continuous monitoring

Source: https://csrc.nist.gov/publications/detail/sp/800-137/rev-1/final

Topics

#NIST SP 800-137#Continuous Monitoring#Federal Information Systems#Compliance

Community Discussion

No community discussion yet for this question.

Full CGRC Practice