According to NIST SP 800-37,the first step in the security controls selection process is to ____.
A) characterize the system
B) select the appropriate minimum security controls for the system
C) adjust security controls based on system exposure and risk decisions
D) None of these

Question

Quizplus · Accepted Answer

According to NIST SP 800-37, the first step in the security controls selection process is to characterize the system. This involves identifying the system's purpose, function, and operational environment, as well as its assets, data, and potential threats and vulnerabilities. Once the system has been characterized, the appropriate minimum security controls can be selected and implemented, and adjustments can be made based on the system's exposure and risk decisions.

According to NIST SP 800-37,the First Step in the Security