QuestionQ62

VerifiedCloud Compliance Program

Which of the following processes should be performed FIRST to properly implement the NIST SP 800-53 r4 control framework within an organization?

Explanation

Security categorization determines the impact level of an information system based on potential losses of confidentiality, integrity, and availability. That impact level guides selection of the initial security control baseline, which is then tailored to the organization’s needs. (nvlpubs.nist.gov)

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!