During Phase 2 of the NIST performance measures development process,the organization will identify and document the information security performance ____ that would guide security control implementation for the information security program of a specific information system.
A) stakeholders
B) users
C) goals and objectives
D) regulations

Question

Quizplus · Accepted Answer

During Phase 2, the organization will identify and document the goals and objectives that would guide security control implementation for the information security program of a specific information system. This includes defining the desired outcomes and expected benefits from implementing security controls. The other options, stakeholders, users, and regulations, may be important to consider in the development of the performance measures, but they are not the primary focus of Phase 2.

During Phase 2 of the NIST Performance Measures Development Process,the