Which NIST Special Publication defines Security Services?

• A. NIST SP 800-35
• B. NIST SP 800-36
• C. NIST SP 800-64
• D. NIST SP 800-70

Answer: (A)

Understanding where NIST defines terms like Security Services helps you know where to look for the official meaning. Security Services, as a defined concept for a governing information security program, is introduced and described within the publication that focuses on how security activities are organized and delivered in response to events and risks. That publication among the options specifically sets out the notion of Security Services as part of the framework for managing information security, including how services such as protection, detection, response, and recovery are provided to information systems. The other publications cover related areas—policy development, how security is integrated into the system development life cycle, or general guidance and checklists—but they do not define Security Services. So the publication that defines Security Services is the one dedicated to security management and incident-related services.