ISSO\RMF Training Questions (Please note, your name and question will be publicly posted and seen by others online. Do not post any sensitive information or information that can put you or your client at risk)

12/3/2020

Raphael Osamor

12/11/2020 07:22:44 am

sir Yinka;

Is it the information system owner that is responsible for the continuous monitoring phase? or just the responsible party but others may be assign to handle the phase?

Thanks!!!

PR

CyberFirst Solutions

12/11/2020 09:18:33 am

Hello,

The System Owner, though listed as the responsible party in NIST 800-37, does not do all the leg work in this Phase. The ISSO updates implementation statements if need be and uploads artifacts for the Assessor to assess. The Assessor assesses the controls, reviews the implementation statement and passes or fails the control.

The ISSO then briefs the System Owner on the status of the continuous monitoring (Sir/Madam, this is how many controls failed, this is how many passed). System Owner approves is briefed before, during and after continuous monitoring and signs any documents needed

Kate

8/20/2021 03:13:10 am

The NIST 800 Series, i saw its from U.S Department of commerce,
Is it a general series? can it be use in Africa, Nigeria.

Thanks

Ola

8/20/2021 06:45:46 am

Hi Kate,

The NIST series can be used anywhere. It's basically best practices or guidelines.

KATE

8/20/2021 04:54:02 pm

WHATS THE DIFFERENCE BETWEEN CISSP AND ISSO

Ola

8/28/2021 03:49:46 pm

Hi Kate,

The CISSP is a professional cybersecurity certification while ISSO is a job title.

Now, there is also an ISSO certification by Mile One but it 8s more recognized in Canada

Ola

8/28/2021 03:51:15 pm

*is

Cyber Blog

ISSO\RMF Training Questions (Please note, your name and question will be publicly posted and seen by others online. Do not post any sensitive information or information that can put you or your client at risk)

Leave a Reply.

CyberFirst Solutions

Archives

Categories