CGRC · Question #402
The first item listed in the system security plan is the system name and identifier. As required in OMB Circular A 11, each system should be assigned a name and unique identifier. The assignment of…
The correct answer is A. Collect agency information and security metrics specific to the system. Assigning a unique identifier to each system, as required by OMB Circular A-11, enables an agency to accurately collect and track specific information and security metrics pertaining to that individual system. This facilitates precise data collection, reporting, and management…
Question
The first item listed in the system security plan is the system name and identifier. As required in OMB Circular A 11, each system should be assigned a name and unique identifier. The assignment of a unique identifier supports the agencys ability to do what? Response:
Options
- ACollect agency information and security metrics specific to the system.
- BEstablish budget auditability.
- CIdentify risks associated to location.
- DCreate an RTM.
How the community answered
(42 responses)- A86% (36)
- B2% (1)
- C7% (3)
- D5% (2)
Why each option
Assigning a unique identifier to each system, as required by OMB Circular A-11, enables an agency to accurately collect and track specific information and security metrics pertaining to that individual system. This facilitates precise data collection, reporting, and management of the system's security posture.
A unique system identifier provides a distinct reference point, enabling the agency to link specific security controls, vulnerabilities, incidents, and performance metrics directly to that system. This facilitates accurate data collection, analysis, and reporting on the system's security status and overall agency security posture.
While unique identifiers support broader financial management, their primary security purpose isn't solely to establish budget auditability for a system.
Unique identifiers help track systems but do not inherently identify risks associated with a location; location might be an attribute associated with the system, but the identifier itself doesn't identify the risk.
An RTM (Requirements Traceability Matrix) is a project management tool; while system identification is part of overall project documentation, the identifier's direct purpose is not to create an RTM.
Concept tested: System identification benefits for security
Topics
Community Discussion
No community discussion yet for this question.