Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified Information Security Manager · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
B - I don't see how this can be a D
B. update the risk assessment. Updating the risk assessment is crucial because it allows the organization to identify and evaluate any new security risks or vulnerabilities introduced by the code change. This ensures that the security posture of the application remains current and effective. While the other options are also important, such as informing senior management, validating UAT, and modifying key risk indicators, they should be considered as complementary actions rather than the most critical one in the context of security. Updating the risk assessment provides a foundation for making informed decisions regarding the other actions.
A significant change to the underlying code of an application can introduce new vulnerabilities, risks, and potential security issues. Therefore, it is crucial for the information security manager to update the risk assessment to reflect the changes and assess the impact on the overall security posture of the application.