An IS auditor finds ad hoc vulnerability scanning is in place with no clear alignment to the organization's wider security threat and vulnerability management program.
Which of the following would BEST enable the organization to work toward improvement in this area?

Question

An IS auditor finds ad hoc vulnerability scanning is in place with no clear alignment to the organization's wider security threat and vulnerability management program.

Which of the following would BEST enable the organization to work toward improvement in this area?

Yuri Shpovlov · Accepted Answer

Using a capability maturity model to identify a path to an optimized program

Yuri Shpovlov · Answer

Implementing security logging to enhance threat and vulnerability management

Yuri Shpovlov · Answer

Maintaining a catalog of vulnerabilities that may impact mission-critical systems

Yuri Shpovlov · Answer

Outsourcing the threat and vulnerability management function to a third party

Question list

List of questions

Question 1

(0)

Question 2

(0)

Question 3

(0)

Question 4

(0)

Question 5

(0)

Question 6

(0)

Question 7

(0)

Question 8

(0)

Question 9

(0)

Question 10

(0)

Related questions

Question 735 - CISA discussion

Suggested answer: C

0 comments