CISSP: Certified Information Systems Security Professional

By ISC · Question Mode

QuestionQ200

VerifiedSecurity and Risk Management

An enterprise is developing a baseline cybersecurity standard that its suppliers must meet before being awarded a contract. Which of the following statements is true about the baseline cybersecurity standard?

Explanation

A baseline cybersecurity standard should state specific, testable technical requirements so that every supplier can be evaluated consistently against the minimum required security controls. High-level business-oriented statements belong in policy, while contractual legal wording belongs in the agreement.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!