CGRC Exam Question 131
Testing officials should use which NIST publication as guide for developing test procedures?
Response:
Response:
CGRC Exam Question 132
A planning estimate for the amount of days that it takes to assess a Moderate system is ___ - ___ days.
Response:
Response:
CGRC Exam Question 133
Which NIST SP details how RMF can be integrated into the System Development Life-Cycle (SDLC)? Response:
CGRC Exam Question 134
The assessed potential impact resulting from a compromise of the confidentiality, integrity, or availability of an information type, expressed as a value of low, moderate, or high.
Response:
Response:
CGRC Exam Question 135
The management, operational, and technical controls (i.e., safeguards or countermeasures) prescribed for an information system to protect the confidentiality, integrity, and availability of the system and its information.
Response:
Response:
