CGRC · Question #711
What is NIST SP 800-37 R1? Response:
The correct answer is A. Guide for Applying the Risk Management Framework to Federal Information Systems. A Security. NIST SP 800-37 R1 is titled "Guide for Applying the Risk Management Framework to Federal Information Systems: A Security Life Cycle Approach for Federal Information Systems."
Question
What is NIST SP 800-37 R1? Response:
Options
- AGuide for Applying the Risk Management Framework to Federal Information Systems. A Security
- BGuide for Applying the Risk Management Framework to Federal Information Systems. A unsecure
- CGuide for Applying the Safe Management Framework to Federal Information Systems. A Security
- DGuide for Applying the Risk Management Framework to Federal Information Systems. A Security
How the community answered
(39 responses)- A90% (35)
- B5% (2)
- C3% (1)
- D3% (1)
Why each option
NIST SP 800-37 R1 is titled "Guide for Applying the Risk Management Framework to Federal Information Systems: A Security Life Cycle Approach for Federal Information Systems."
NIST SP 800-37 R1, published in February 2010, is indeed titled 'Guide for Applying the Risk Management Framework to Federal Information Systems: A Security Life Cycle Approach for Federal Information Systems'. The provided choice accurately reflects the core content and title of the publication.
This choice incorrectly includes the word 'unsecure', which contradicts the purpose of a security guide.
This choice incorrectly uses 'Safe Management Framework' instead of the correct 'Risk Management Framework'.
This choice is identical to choice A and is a duplicate of the correct answer.
Concept tested: NIST SP 800-37 R1 publication title/purpose
Source: https://csrc.nist.gov/publications/detail/sp/800-37/rev1/archive/2010-02-08
Topics
Community Discussion
No community discussion yet for this question.