Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified Information Security Manager · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
The next best course of action is to mitigate the risk by re-configuring. However as it's an outsourced technology so responsibility lies with vendor. Hence as a security manager verifying evidence of corrective action is enough.
The CISM exam would consider the overall readiness plan (B) to be the most important requirement, as it ensures an effective response in a wide variety of circumstances, even before a specific incident occurs. You are correct that a zero-day attack means no patch is immediately available. However, the question is not asking for the FIRST STEP to take during an attack but the MOST important requirement when establishing a process for responding to zero-day vulnerabilities.
D redefine the accountability of SP