QuestionQ163Verified/Security Concepts and PracticesCopy linkReport a problemAsk AstroTutorSave questionWhich of the following is NOT involved in a trusted system?AEnforcement of a security policy.BSufficiency and effectiveness of mechanisms to be able to enforce a security policy.CAssurance that the security policy can be enforced in an efficient and reliable manner.DIndependently-verifiable evidence that the security policy-enforcing mechanisms are sufficient and effective.Show AnswerAnswerExplanationA trusted system enforces a security policy through sufficient, effective mechanisms and provides assurance—credible, independently evaluable evidence—that those mechanisms enforce the policy. Efficient enforcement is desirable but is not a defining trusted-system requirement.Learn moreNIST CSRC Glossary: Security AssuranceShow comments0Show commentsCommunity DiscussionNo comments yet. Be the first to start the discussion!
Community Discussion