112k views
3 votes
Specific system security plans for ________________________ are not required because the security controls for those applications are typically provided by the general support system or major application in which they operate.

A) Major applications
B) General support systems
C) Minor applications
D) All of the above

User Megann
by
6.7k points

1 Answer

4 votes

Final answer:

Minor applications do not typically require specific system security plans, as their security is covered by the general support system or major application they are part of.

Step-by-step explanation:

The specific system security plans that the question refers to are not typically required for C) Minor applications. This is because the security controls for these applications are often provided by the overarching infrastructure they operate within, which could be either a general support system or a major application. General support systems are the broad IT infrastructure that provides a platform for the operating environment. Major applications, on the other hand, are programs or groups of programs that are essential to the mission of an agency and require special attention to security due to the risk and magnitude of harm resulting from the loss, misuse, unauthorized access to, or modification of the information in the application.

In this context, minor applications are typically seen as having less impact or importance in terms of individual security planning because their risks are covered under the security plans of the systems they reside within. These minor applications, therefore, inherit their security controls from the general support systems or major applications, consequently omitting the need for individualized security plans for each minor application. Any security requirements specific to the minor applications would be addressed within the broader system's security plan.

User Leon Barkan
by
8.0k points