medium
Single Answer
0Denis is reviewing NIST SP 800-18. Which of the following tasks is not performed by a system owner according to this standard?
Answer Options
A
Develops a system security plan
B
Establishes rules for appropriate use and protection of data
C
Identifies and implements security controls
D
Ensures that system users receive appropriate security training
Correct Answer: B
Explanation
The data owner sets the rules for use and protection of data. The remaining options all describe tasks for the system owner, including implementation of security controls.