CSSLP: Certified Secure Software Lifecycle Professional

By ISC · Question Mode

QuestionQ65

VerifiedSecure Software Lifecycle Management

Della is a security engineer at BlueWell Inc. She wants to establish configuration-management and control procedures that document proposed or actual changes to the information system. Which phase of the NIST SP 800-37 C&A methodology defines this task?

Explanation

The Continuous Monitoring phase includes configuration management and control. Its objective includes documenting proposed or actual changes to an information system and determining their security impact, supporting continued maintenance of the system’s security accreditation.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!