CISA Question 409

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose B2

  While rollback plans for changes (Option A) are important for mitigating risks associated with implementation issues or unforeseen consequences of modifications, the sufficiency of implemented controls is of greater importance during a post-implementation review. Assessing the sufficiency of controls ensures that appropriate measures are in place to manage risks, protect data, maintain system integrity, and ensure compliance with relevant policies, standards, and regulations.

• 4

  B. Sufficiency of implemented controls