- Home
- All questions
- Question 16
CompTIA Security+ study material · question 16 of 611
Agency B accepts Agency A's existing assessment evidence for a shared service instead of repeating the assessment. What is this practice called?
Show the answer
Answer: C. Reciprocity
Reciprocity accepts another organisation's evidence where context and controls align, avoiding duplicated assessment work.
Source: NIST SP 800-37 Rev. 2 (NIST) — SP 800-37 Rev. 2 § 2 Fundamentals