CGRC · Question #261
Tailored control baselines may also be referred to as Response:
The correct answer is D. Overlays. Tailored control baselines, which are modifications made to an organization's security control baseline, are also known as overlays. Overlays apply additional controls or modify existing ones to meet specific organizational or system requirements beyond the standard baseline.
Question
Tailored control baselines may also be referred to as Response:
Options
- ATailoring
- BAlternative controls
- CCountermearsures
- DOverlays
How the community answered
(21 responses)- A5% (1)
- D95% (20)
Why each option
Tailored control baselines, which are modifications made to an organization's security control baseline, are also known as overlays. Overlays apply additional controls or modify existing ones to meet specific organizational or system requirements beyond the standard baseline.
Tailoring is the process of modifying a control baseline, not an alternative term for the resulting modified baseline itself.
Alternative controls are different controls used when a prescribed control is not feasible, not a term for tailored baselines.
Countermeasures are actions, devices, procedures, or techniques that reduce a threat, not a synonym for tailored control baselines.
Overlays are sets of security controls that supplement or modify a control baseline to address specific risks or requirements, effectively tailoring the baseline for a particular system or organization. They provide a structured way to customize the baseline without recreating it entirely.
Concept tested: Security control baseline tailoring and overlays
Source: https://nvlpubs.nist.gov/nistpubs/specialpublications/nist.sp.800-53r5.pdf
Topics
Community Discussion
No community discussion yet for this question.