CISSP-ISSEP: Information Systems Security Engineering Professional

Question

You work as a security engineer for BlueWell Inc. In your view, which of the following statements identifies the primary focus of the ISSE process?

Explanation

The ISSE process begins with identifying information protection needs so that security requirements can be defined and incorporated into the information system’s design, development, and configuration. NIST describes information system security engineering as capturing and refining security requirements and ensuring their integration into systems through purposeful security design.

Learn more

NIST SP 800-37 Rev. 1: Guide for Applying the Risk Management Framework to Federal Information Systems and Organizations

CISSP-ISSEP: Information Systems Security Engineering Professional

AstroTutor

Notes

Readiness

QuestionQ117

Community Discussion