According to NIST SP 800-37,which of the Following Is the First

question 16

Multiple Choice

According to NIST SP 800-37,which of the following is the first step in the security controls selection process?

• A) Categorize the information system and the information processed
• B) Select an initial set of baseline security controls
• C) Assess the security controls using appropriate assessment procedures
• D) Authorize information system operation based on risk determination

---

Definitions:

Design

The process of envisioning and planning the creation of objects, systems, or interactive experiences to fulfill specific functions or intents.

Network Capable

Able to connect and operate within a network, allowing for communication and data exchange between networked devices.

Electronic Device

A device that uses electricity to perform a function, such as a smartphone or laptop.