Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified Information Security Manager · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
4-eyes principle for instance...
a Compensating Control: is a mechanism that is put in place to satisfy the requirement for a security measure that is deemed too difficult or impractical to implement at the present time. changing password requirements and resulting in negatively impacting user experience means it is impractical, so the needed is to evaluate compensating controls.
A. The IS team have decided to increase the PSW complexity to mitigate the risk , it means the risk has been identified and the impact to business has been highlighted already . So if the technical mitigation action is not good enough , we have to find its alternative solution such as SSO ....