CGRC · Question #226
Which NIST SP series document is concerned with continuous monitoring for federal information systems and organizations? Response:
The correct answer is C. SP 800-137. NIST Special Publication 800-137 provides comprehensive guidance for establishing and implementing information security continuous monitoring (ISCM) programs for federal information systems.
Question
Which NIST SP series document is concerned with continuous monitoring for federal information systems and organizations? Response:
Options
- ASP 800-144
- BSP 800-64
- CSP 800-137
- DSP 800-26
How the community answered
(38 responses)- B5% (2)
- C92% (35)
- D3% (1)
Why each option
NIST Special Publication 800-137 provides comprehensive guidance for establishing and implementing information security continuous monitoring (ISCM) programs for federal information systems.
NIST SP 800-144, "Guidelines on Security and Privacy in Public Cloud Computing," focuses on cloud security considerations.
NIST SP 800-64, "Security Considerations in the System Development Life Cycle," deals with integrating security into the SDLC.
NIST SP 800-137, titled "Information Security Continuous Monitoring (ISCM) for Federal Information Systems and Organizations," specifically outlines the process for implementing and managing continuous monitoring to maintain ongoing awareness of an organization's security posture.
NIST SP 800-26, "Security Self-Assessment Guide for Information Technology Systems," provided guidance for self-assessments but is largely superseded by other documents.
Concept tested: NIST SP 800-137 continuous monitoring
Source: https://csrc.nist.gov/publications/detail/sp/800-137/rev-1/final
Topics
Community Discussion
No community discussion yet for this question.