CISM Question 92

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• 1

  Are the "correct" answer actually verified?

• Chose A1

  The primary benefit of configuration management is consistency of systems and software.

• 2

  (D) - ISACA CISM 15ed Review Manual: The information security manager must provide ongoing - management of the operational information security components. This includes system patching procedures and configuration management. Thus decreasing an existing weakness or flaw in an OS, network, or application - reducing vulnerability. Also, for ISACA keep in mind that "RISK" = THREATS * VULNERABILITIES * CONSEQUENCES = $$ impact to the organization.