PCCET · Question #129
Which systems must you secure to ensure compliance with security standards?
The correct answer is C. any system where the data for which you are responsible goes. To ensure compliance with security standards, organizations must secure any system that processes, stores, or transmits data for which they are responsible, regardless of ownership or location.
Question
Which systems must you secure to ensure compliance with security standards?
Options
- Athe servers in the data center
- Bthe devices owned by the enterprise, whether they are servers in the data center, cloud vms you
- Cany system where the data for which you are responsible goes
- Devery device that is either owned by the enterprise, or used by enterprise employees
How the community answered
(33 responses)- A3% (1)
- B6% (2)
- C88% (29)
- D3% (1)
Why each option
To ensure compliance with security standards, organizations must secure any system that processes, stores, or transmits data for which they are responsible, regardless of ownership or location.
Limiting security to only data center servers is too restrictive and neglects other critical assets like cloud resources, endpoints, and third-party services.
Focusing solely on enterprise-owned devices overlooks third-party systems or cloud services that process or store an organization's responsible data.
Security compliance mandates protecting the data an organization is responsible for, requiring security measures on any system where that data resides, is processed, or is transmitted, regardless of the system's ownership or location.
While securing enterprise-owned and employee-used devices is important, this scope might still miss third-party systems processing your data and could include personal devices without relevant corporate data.
Concept tested: Scope of Security Compliance
Source: https://csrc.nist.gov/publications/detail/sp/800-53/rev-5/final
Topics
Community Discussion
No community discussion yet for this question.