CGRC · Question #398
Which National Institute of Standards and Technology Special Publication (NIST SP) 800 series document is concerned with continuous monitoring for federal information systems and organizations? Respon
The correct answer is C. SP 800-137. NIST Special Publication 800-137 provides comprehensive guidance on Information Security Continuous Monitoring for federal information systems and organizations.
Question
Which National Institute of Standards and Technology Special Publication (NIST SP) 800 series document is concerned with continuous monitoring for federal information systems and organizations? Response:
Options
- ASP 800-26
- BSP 800-64
- CSP 800-137
- DSP 800-144
How the community answered
(41 responses)- A7% (3)
- B2% (1)
- C85% (35)
- D5% (2)
Why each option
NIST Special Publication 800-137 provides comprehensive guidance on Information Security Continuous Monitoring for federal information systems and organizations.
NIST SP 800-26 is an older publication on security self-assessment guides for information technology systems, not continuous monitoring.
NIST SP 800-64 focuses on security considerations in the System Development Life Cycle (SDLC), not continuous monitoring.
NIST SP 800-137, titled 'Information Security Continuous Monitoring (ISCM) for Federal Information Systems and Organizations,' specifically details the process and guidelines for implementing continuous monitoring. This publication focuses on establishing and maintaining ongoing situational awareness of security and privacy posture.
NIST SP 800-144 addresses cloud computing security, not the general topic of continuous monitoring.
Concept tested: NIST SP 800-137 (Continuous Monitoring)
Source: https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-137a.pdf
Topics
Community Discussion
No community discussion yet for this question.