nerdexam
(ISC)2

CGRC · Question #564

A set of security controls resulting from the application of tailoring guidance to the security control baseline. Response:

The correct answer is A. Tailored Security Control Baseline. A Tailored Security Control Baseline is a customized set of security controls derived by applying specific tailoring guidance to an initial security control baseline.

Selection and Approval of Framework, Security, and Privacy Controls

Question

A set of security controls resulting from the application of tailoring guidance to the security control baseline. Response:

Options

  • ATailored Security Control Baseline
  • BSystem-Specific Security Control
  • CSecurity Control Inheritance
  • DSecurity Control Enhancements

How the community answered

(49 responses)
  • A
    94% (46)
  • C
    2% (1)
  • D
    4% (2)

Why each option

A Tailored Security Control Baseline is a customized set of security controls derived by applying specific tailoring guidance to an initial security control baseline.

ATailored Security Control BaselineCorrect

A security control baseline provides a starting point for security controls for an information system. Applying 'tailoring guidance' involves adjusting these baseline controls based on factors like system categorization, operating environment, and organizational risk tolerance, resulting in a 'tailored security control baseline' that is specific to the system's needs.

BSystem-Specific Security Control

A System-Specific Security Control refers to an individual control unique to a particular system, not the entire modified set derived from a baseline.

CSecurity Control Inheritance

Security Control Inheritance involves adopting controls from a common control provider, rather than the process of modifying a baseline through tailoring.

DSecurity Control Enhancements

Security Control Enhancements are specific modifications to individual controls to increase their strength or specificity, not the overall process of tailoring a baseline.

Concept tested: Security control tailoring

Source: https://csrc.nist.gov/publications/detail/sp/800-53b/final

Topics

#Security Controls#Tailoring#Security Control Baseline#RMF

Community Discussion

No community discussion yet for this question.

Full CGRC Practice