According to NIST SP 800-37,which of the Following Is the First

question 16

Multiple Choice

According to NIST SP 800-37,which of the following is the first step in the security controls selection process?

• A) Categorize the information system and the information processed
• B) Select an initial set of baseline security controls
• C) Assess the security controls using appropriate assessment procedures
• D) Authorize information system operation based on risk determination

---

Definitions:

Errors

Differences between observed values and the true values in data collection, analysis, or estimation.

Defects

Imperfections or faults in a product or process that deviate from desired specifications or standards.

Population

The entire pool from which a statistical sample is drawn, often referring to a total set of observations that can be analyzed.

Sample

A subset of individuals, items, or data taken from a larger population, utilized for the purpose of analysis and inference.