CISSP-ISSEP: Information Systems Security Engineering Professional

Question

Many information security standards encourage sound security practices and establish frameworks or systems that organize the analysis and design of information-security controls management. Which of the following are U.S. Federal Government information security standards? Each correct answer represents a complete solution. Choose all that apply.

Choose three

Explanation

NIST Special Publication 800-53, the control catalog mandated for U.S. federal information systems under FISMA, organizes controls into named families identified by two-letter codes, including CA (Security Assessment, Authorization, and Monitoring, historically "Certification, Accreditation, and Security Assessments"), IR (Incident Response), and SA (System and Services Acquisition). "Information systems acquisition, development, and maintenance" is instead the title of a control clause in ISO/IEC 27001 Annex A, an international standard rather than a U.S. federal one, so it does not belong with the others.

CISSP-ISSEP: Information Systems Security Engineering Professional

AstroTutor

Notes

Readiness

QuestionQ163

Community Discussion