Informal and Ad Hoc Interviews
Question
NIST SP 800-53A defines three types of interview depending on the level of assessment conducted.
Which of the following NIST SP 800-53A interviews consists of informal and ad hoc interviews?
Answers
Explanations
Click on the arrows to vote for the correct answer
A. B. C. D.Abbreviated interview consists of informal and ad hoc interviews.
Answer: D is incorrect.
Substantial interview consists of informal and structured.
in NIST SP 800-53A.
NIST SP 800-53A is a document published by the National Institute of Standards and Technology (NIST) that provides guidelines for assessing the security controls of information systems. The document defines three types of interviews that can be used during the assessment process, which are:
A. Comprehensive interview: This type of interview is the most detailed and thorough type of interview, which is used to collect information about the security controls from a wide range of stakeholders, including system administrators, developers, and end-users. The comprehensive interview is typically conducted using a structured questionnaire, and the responses are documented in detail.
B. Significant interview: This type of interview is less detailed than the comprehensive interview and is used to gather information about the security controls from key stakeholders who are responsible for implementing or managing the controls. The significant interview is typically conducted using a semi-structured questionnaire, and the responses are documented in less detail than the comprehensive interview.
C. Abbreviated interview: This type of interview is the least detailed type of interview, which is used to gather information about the security controls from a limited number of stakeholders. The abbreviated interview is typically informal and ad hoc, and the responses are not documented in detail.
D. Substantial interview: This type of interview is not defined in NIST SP 800-53A, and therefore, it is not the correct answer to the question.
Therefore, the correct answer to the question is C. Abbreviated interview, which consists of informal and ad hoc interviews.
