According to the Orange Book, trusted facility management is not required for which of the
following security levels?

A.
B1

B.
B2

C.
B3

D.
A1

Explanation:
B1 does not provide trusted facility management, the next highest level that does is
B2.
“Trusted facility management is defined as the assignment of a specific individual to administer the
security-related functions of a system. Although trusted facility management is an assurance
requirement only for highly secure systems (B2, B3, and A1), many systems evaluated at lower
security levels re structured to try to meet this requirement.” Pg. 302 Krutz: The CISSP Prep
Guide: Gold Edition