Which publication is focused on outlining the eight topic areas used for strategic information security program management under PRISM?

• A. PRISM Topic Areas of Coverage
• B. NIST IR 7564
• C. NIST IR 7359
• D. NIST IR 7581

Answer: (A)

The concept being tested is identifying the publication that explicitly defines the set of eight topic areas used to organize and govern a PRISM-based information security program. The best answer is the publication whose title directly states the eight PRISM topic areas of coverage. That publication is designed to outline these eight areas and how they guide strategic program management, governance, risk management, policy, measurement, training, and related activities within PRISM.

The other options are NIST Interagency Reports, which provide various security standards, guidelines, and measurement approaches, but they do not define the PRISM eight-topic framework.