According to NIST SP 800-37 Rev 2, which role has a primary responsibility to report the security status of the information system to the authorizing official (OA) and other appropriate organizational officials on an ongoing basis in accordance with the monitoring strategy?
Response:
Which of the following in an assessment plan protects the security control assessment team from liability should the security control assessment result in unforeseen damage? Response:
Which of the following recovery plans includes specific strategies and actions to deal with specific variances to assumptions resulting in a particular security problem, emergency, or state of affairs? Response:
Governing document that provides a comprehensive, rigorous method for specifying security function and assurance requirements for products and systems.
Response:
Which of the following components ensures that risks are examined for all new proposed change requests in the change control system?
Response:
