CISM Question 137

Question

An information security manager was informed that a planned penetration test could potentially disrupt some services. Which of the following should be the FIRST course of action?
A. Estimate the impact and inform the business owner.
B. Accept the risk and document it in the risk register.
C. Ensure the service owner is available during the penetration test.
D. Reschedule the activity during an approved maintenance window.

Accepted Answer

Marked answer: A. Estimate the impact and inform the business owner.

CISM Question 137

Community Discussion

Preparing Practice Exam…

CISM Question 137

Community Discussion