CGRC · Question #564
A set of security controls resulting from the application of tailoring guidance to the security control baseline. Response:
The correct answer is A. Tailored Security Control Baseline. A Tailored Security Control Baseline is a customized set of security controls derived by applying specific tailoring guidance to an initial security control baseline.
Question
A set of security controls resulting from the application of tailoring guidance to the security control baseline. Response:
Options
- ATailored Security Control Baseline
- BSystem-Specific Security Control
- CSecurity Control Inheritance
- DSecurity Control Enhancements
How the community answered
(49 responses)- A94% (46)
- C2% (1)
- D4% (2)
Why each option
A Tailored Security Control Baseline is a customized set of security controls derived by applying specific tailoring guidance to an initial security control baseline.
A security control baseline provides a starting point for security controls for an information system. Applying 'tailoring guidance' involves adjusting these baseline controls based on factors like system categorization, operating environment, and organizational risk tolerance, resulting in a 'tailored security control baseline' that is specific to the system's needs.
A System-Specific Security Control refers to an individual control unique to a particular system, not the entire modified set derived from a baseline.
Security Control Inheritance involves adopting controls from a common control provider, rather than the process of modifying a baseline through tailoring.
Security Control Enhancements are specific modifications to individual controls to increase their strength or specificity, not the overall process of tailoring a baseline.
Concept tested: Security control tailoring
Source: https://csrc.nist.gov/publications/detail/sp/800-53b/final
Topics
Community Discussion
No community discussion yet for this question.