nerdexam
(ISC)2

CGRC · Question #529

The Assessment Test plan once developed is submitted to __________ for approval. Response:

The correct answer is A. Host. The Assessment Test plan, once developed, is submitted to the Host for approval, typically referring to the system owner or the accountable entity responsible for the information system.

Assessment/Audit of Security and Privacy Controls

Question

The Assessment Test plan once developed is submitted to __________ for approval. Response:

Options

  • AHost
  • BTeam Lead
  • CSystem Owner
  • DGuest

How the community answered

(29 responses)
  • A
    86% (25)
  • B
    3% (1)
  • C
    3% (1)
  • D
    7% (2)

Why each option

The Assessment Test plan, once developed, is submitted to the Host for approval, typically referring to the system owner or the accountable entity responsible for the information system.

AHostCorrect

The 'Host' in this context refers to the entity or individual ultimately responsible for the information system and its operation, which includes the System Owner. This individual or entity must approve the assessment test plan to ensure it aligns with organizational requirements, scope, and objectives for the system's security and to authorize the assessment activities to proceed.

BTeam Lead

A Team Lead manages the assessment team but typically does not have the authority to formally approve the overarching assessment plan for a system.

CSystem Owner

While the System Owner is generally the responsible party and often involved in approval, 'Host' is specified as the correct answer, implying it might represent the broader organizational entity or senior stakeholder, or it is a specific term in the context of the originating material.

DGuest

A 'Guest' would certainly not be responsible for approving an assessment plan for an information system.

Concept tested: Approval authority for security assessment plans

Topics

#Assessment Plan#Control Assessment#Approval Process#NIST RMF

Community Discussion

No community discussion yet for this question.

Full CGRC Practice