During a security assessment, an information security manager finds a number of security patches were not installed on a server hosting a critical business application. The application owner did not approve the patch installation to avoid interrupting the application.Which of the following should be the information security manager’s FIRST course of action?
Answer(s): D
Risk identification, analysis, and mitigation activities can BEST be integrated into business life cycle processes by linking them to:
Answer(s): B
Which of the following is the PRIMARY reason for performing an analysis of the threat landscape on a regular basis?
Answer(s): C
Which of the following would BEST justify spending for a compensating control?
After undertaking a security assessment of a production system, the information security manager is MOSTlikely to:
Answer(s): A
Post your Comments and Discuss ISACA CISM exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the CISM content, but please register or login to continue.