nerdexam
(ISC)2

CSSLP · Question #253

Which of the following NIST documents provides a guideline for identifying an information system as a National Security System?

The correct answer is B. NIST SP 800-59. NIST SP 800-59 provides guidelines for identifying information systems that are considered National Security Systems.

Secure Software Concepts

Question

Which of the following NIST documents provides a guideline for identifying an information system as a National Security System?

Options

  • ANIST SP 800-37
  • BNIST SP 800-59
  • CNIST SP 800-53
  • DNIST SP 800-60
  • ENIST SP 800-53A

How the community answered

(49 responses)
  • A
    2% (1)
  • B
    88% (43)
  • D
    4% (2)
  • E
    6% (3)

Why each option

NIST SP 800-59 provides guidelines for identifying information systems that are considered National Security Systems.

ANIST SP 800-37

NIST SP 800-37 (Risk Management Framework) provides guidance for applying the RMF to federal information systems.

BNIST SP 800-59Correct

NIST Special Publication 800-59, 'Guideline for Identifying an Information System as a National Security System,' outlines the criteria and processes for federal agencies to determine if an information system meets the definition of a National Security System. This classification is critical as it imposes specific security requirements and management responsibilities.

CNIST SP 800-53

NIST SP 800-53 (Security and Privacy Controls) recommends security and privacy controls for federal information systems and organizations.

DNIST SP 800-60

NIST SP 800-60 (Guide for Mapping Information Types) assists in categorizing information types based on their impact levels.

ENIST SP 800-53A

NIST SP 800-53A (Assessing Security and Privacy Controls) provides guidance for assessing the effectiveness of security and privacy controls.

Concept tested: NIST Special Publications - National Security Systems

Source: https://csrc.nist.gov/publications/detail/sp/800-59/rev-1/final

Topics

#NIST SP 800-59#National Security System#Information System Classification#Regulatory Compliance

Community Discussion

No community discussion yet for this question.

Full CSSLP Practice