CGRC · Question #529
The Assessment Test plan once developed is submitted to __________ for approval. Response:
The correct answer is A. Host. The Assessment Test plan, once developed, is submitted to the Host for approval, typically referring to the system owner or the accountable entity responsible for the information system.
Question
The Assessment Test plan once developed is submitted to __________ for approval. Response:
Options
- AHost
- BTeam Lead
- CSystem Owner
- DGuest
How the community answered
(29 responses)- A86% (25)
- B3% (1)
- C3% (1)
- D7% (2)
Why each option
The Assessment Test plan, once developed, is submitted to the Host for approval, typically referring to the system owner or the accountable entity responsible for the information system.
The 'Host' in this context refers to the entity or individual ultimately responsible for the information system and its operation, which includes the System Owner. This individual or entity must approve the assessment test plan to ensure it aligns with organizational requirements, scope, and objectives for the system's security and to authorize the assessment activities to proceed.
A Team Lead manages the assessment team but typically does not have the authority to formally approve the overarching assessment plan for a system.
While the System Owner is generally the responsible party and often involved in approval, 'Host' is specified as the correct answer, implying it might represent the broader organizational entity or senior stakeholder, or it is a specific term in the context of the originating material.
A 'Guest' would certainly not be responsible for approving an assessment plan for an information system.
Concept tested: Approval authority for security assessment plans
Topics
Community Discussion
No community discussion yet for this question.