CGRC · Question #400
Publication that specifies security requirements for federal information and Info Systems in 17 security related areas that represent a broad-based, balanced information security program. Response:
The correct answer is A. FIPS 200. FIPS 200 outlines the minimum security requirements for federal information and information systems across 17 distinct security-related areas.
Question
Publication that specifies security requirements for federal information and Info Systems in 17 security related areas that represent a broad-based, balanced information security program. Response:
Options
- AFIPS 200
- BFIPS 299
- CFIPS 300
- DFIPS 199
How the community answered
(46 responses)- A93% (43)
- C4% (2)
- D2% (1)
Why each option
FIPS 200 outlines the minimum security requirements for federal information and information systems across 17 distinct security-related areas.
FIPS 200, titled 'Minimum Security Requirements for Federal Information and Information Systems,' mandates the minimum security requirements for federal information and information systems. It categorizes these requirements into 17 security-related areas, which are further elaborated by the control families in NIST SP 800-53.
FIPS 299 does not exist as an official NIST publication.
FIPS 300 does not exist as an official NIST publication.
FIPS 199 focuses on defining security categories (impact levels-low, moderate, high) for information and information systems, not the specific security requirements or control families.
Concept tested: FIPS 200 (Minimum Security Requirements)
Source: https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.200.pdf
Topics
Community Discussion
No community discussion yet for this question.