Explanation

Purpose of NIST SP 800-53:
NIST SP 800-53 defines standardized, minimum security controls to ensure IT systems maintain confidentiality, integrity, and availability (CIA).
Why This is Correct:
The CIA triad is the cornerstone of information security, and NIST SP 800-53 ensures these principles are addressed across low, moderate, and high-risk levels.
Why Other Options Are Incorrect:
* B. Assurance, Compliance, and Availability: Assurance and compliance are not core focuses.
* C. International Compliance: NIST standards are primarily U.S.-focused.
* D. Integrity and Availability: Leaves out confidentiality, a critical component.
References:
NIST SP 800-53 is foundational in EC-Council training for understanding how to establish controls to address the CIA triad effectively.

When a vendor refuses to make changes after completing contracted work, the contract agreement serves as the binding document to resolve disputes and clarify obligations.
* Contractual Obligations:
* The agreement outlines the scope of work, responsibilities, and any clauses related to change management.
* Ensures both parties adhere to predefined terms.
* Steps to Resolve the Dispute:
* Review clauses about post-completion changes.
* Assess whether the requested changes fall within the vendor's contractual obligations.
* Why Other Options Are Less Suitable:
* SLA: Typically focuses on performance and service quality, not contract modifications.
* RFP: Pre-contract document, not applicable for resolving disputes.
* Withholding Payments: A punitive action that could escalate the conflict without resolving the issue.
* Vendor Management: Emphasizes the importance of clear contracts for managing vendor relationships and resolving conflicts.
* Legal and Compliance Guidance: Stresses adherence to contractual terms to ensure fairness and enforceability.