問題文
An engineering team is told after the fact that it owns nine controls it never discussed, and it disputes two of them as technically impossible on its platform. Which answer names what the selection stage should have secured?
選択肢
- Allocation only holds if the people named accept it, so the organization obtains the stakeholder agreement, collects the signed acceptance for it, and preserves the objection record that its selection documentation retains.
- Allocation only holds if the people named accept it, so the organization obtains the monitoring strategy, collects the assessment frequency for it, and preserves the metric definition that its selection documentation retains.
- Allocation only holds if the people named accept it, so the organization obtains the marking requirement, collects the handling caveat for it, and preserves the release restriction that its selection documentation retains.
- Allocation only holds if the people named accept it, so the organization obtains the mitigating control, collects the reduced exposure for it, and preserves the partial coverage that its selection documentation retains.