Study. uk . com
  1. Home
  2. All questions
  3. Question 252

CompTIA Security+ study material · question 252 of 611

Why does a control catalogue matter more than a list of security intentions?

  1. Because catalogues are updated more often than policies
  2. Because catalogues include product recommendations
  3. Because a requirement can be traced to a specific control with a specific assessment procedure
  4. Because catalogues are legally binding
Show the answer

Answer: C. Because a requirement can be traced to a specific control with a specific assessment procedure

Traceability from requirement to control to assessment is what makes a claim of compliance testable.

Source: NIST SP 800-53 Rev. 5 (NIST) — SP 800-53r5 › Abstract

Challenge yourself on this topic → Study as cards