nerdexam
(ISC)2

CGRC · Question #91

Why is the early selection of assessors important to organizations implementing a systems security engineering approach? Response:

The correct answer is B. Early selection of assessors support verification and validation activities that occur throughout the. The early involvement of security assessors is crucial in a systems security engineering approach because they provide continuous verification and validation throughout the entire system lifecycle.

Assessment/Audit of Security and Privacy Controls

Question

Why is the early selection of assessors important to organizations implementing a systems security engineering approach? Response:

Options

  • AEarly selection of assessors assess all implement security controls
  • BEarly selection of assessors support verification and validation activities that occur throughout the
  • CEarly selection of assessors voilates security requirements
  • DEarly selection of assessors complete security control assessments in a timely manner

How the community answered

(40 responses)
  • B
    95% (38)
  • C
    3% (1)
  • D
    3% (1)

Why each option

The early involvement of security assessors is crucial in a systems security engineering approach because they provide continuous verification and validation throughout the entire system lifecycle.

AEarly selection of assessors assess all implement security controls

Assessors do not necessarily assess all implemented security controls, but rather a subset or specific controls as part of the overall assessment strategy.

BEarly selection of assessors support verification and validation activities that occur throughout theCorrect

Early selection of assessors is crucial because they provide continuous support for verification and validation activities from the initial stages through the entire system development lifecycle. This integration helps identify and address security issues proactively, ensuring the system meets its security objectives effectively.

CEarly selection of assessors voilates security requirements

Early selection of assessors enhances security by integrating expertise, not violating security requirements.

DEarly selection of assessors complete security control assessments in a timely manner

While timely completion of assessments is a goal, the primary importance of early selection is the continuous support for verification and validation, which contributes to timely completion but is not the sole reason.

Concept tested: Systems security engineering assessment role

Source: https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-160v1r1.pdf

Topics

#Assessor involvement#Verification and Validation#Security engineering#Continuous assessment

Community Discussion

No community discussion yet for this question.

Full CGRC Practice