Pearson CPIM-8.0 New Attempt

Determine if the organization’s risk posture allows the system to operate without the continuous monitoring of the controls in question

Identify and monitor only the technical controls, as they cover the most critical threats to the organization

Ensure that the organization’s Configuration Management (CM) and control processes are documented and executed according to policy

Continue developing the system using a secure Software Development Life Cycle (SDLC) approach and testing, thereby eliminating the need for monitoring the security controls

To provide additional layers of firewalls to the environment

To create additional logical barriers to entry

To allow access to new cryptographic keys

To manage cryptographic keys in a tamper-proof model

Criteria

Condition

Effect

Cause

Reviewing the policy, objectives, mandate, and commitment to manage risk

Learning the organization's ability to accept and/or manage risks

Identifying the resources available to manage risks within the organization

Identifying the nature of the risks faced by the organization