Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified Information Security Manager · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
If the update is security control itself, i prefer D. However i take it as functional update, then answer should be B.
D. Review the effectiveness of controls. After a business system update, it is essential to assess the effectiveness of the controls put in place to secure the updated system. This assessment helps identify any new vulnerabilities introduced during the update process or any weaknesses in the existing security controls. By reviewing the effectiveness of controls, organizations can ensure that their systems remain secure and that any vulnerabilities are promptly identified and remediated. This proactive approach helps prevent security incidents and breaches that could result from overlooked vulnerabilities.
The PRIMARY objective of performing a vulnerability assessment following a business system update is to review the effectiveness of controls. By conducting a vulnerability assessment, organizations can identify and assess potential vulnerabilities or weaknesses in the updated system