Study. uk . com
  1. Home
  2. All questions
  3. Question 572

CompTIA Security+ study material · question 572 of 611

What makes ongoing authorisation less costly than a periodic full reassessment?

  1. The authorising official delegates the decision
  2. Reciprocity removes the need for assessment
  3. The control baseline is smaller
  4. Assessment can reuse evidence produced by continuous monitoring
Show the answer

Answer: D. Assessment can reuse evidence produced by continuous monitoring

The evidence is already being generated, so the assessment consumes it rather than commissioning fresh testing.

Source: NIST SP 800-37 Rev. 2 (NIST) — SP 800-37 Rev. 2 § 3.7 Monitor

Challenge yourself on this topic → Study as cards