CISM · Question #755
When defining a security baseline, it is MOST important that the baseline:
The correct answer is D. is uniform for all assets of the same type. A security baseline is a set of minimum security requirements for a system or asset type. The CISM Review Manual states that a baseline should be uniform for all assets of the same type to ensure consistency, enforceability, and ease of monitoring. This standardization supports…
Question
When defining a security baseline, it is MOST important that the baseline:
Options
- Acan vary depending on the security classification of systems.
- Baligns to key risk indicators (KRIs).
- Cis developed based on stakeholder consensus.
- Dis uniform for all assets of the same type.
How the community answered
(65 responses)- A8% (5)
- B14% (9)
- C3% (2)
- D75% (49)
Explanation
A security baseline is a set of minimum security requirements for a system or asset type. The CISM Review Manual states that a baseline should be uniform for all assets of the same type to ensure consistency, enforceability, and ease of monitoring. This standardization supports effective compliance and security operations. While other factors can influence baseline adjustments, uniformity for similar asset types is most critical.
Topics
Community Discussion
No community discussion yet for this question.