Which SP 800 document is the Information Security Handbook - A guide for managers?

• A. Information Security Handbook - A guide for managers
• B. Guide to Protecting the Confidentiality of PII
• C. Guide for Security Focused Configuration Management of Information Systems
• D. Guideline for Media Santitization

Answer: (A)

The main idea here is recognizing which NIST SP 800 publication corresponds to a management-focused information security handbook. The Information Security Handbook: A Guide for Managers is SP 800-100, and it’s specifically designed to provide governance, risk management, and program-management guidance for senior leaders and security program managers. It focuses on how to build, implement, and sustain an information security program, covering roles, responsibilities, policies, budgeting, and metrics rather than hands-on technical controls. The other options refer to separate SP 800 documents with narrower topics—protecting the confidentiality of PII, guidelines for media sanitization, and security-focused configuration management—so they don’t match the Information Security Handbook title.