An organization's internal audit team performed a security audit on the company's system and reported that the manufacturing application is rarely updated along with other issues categorized as minor. Six months later, an external audit team reviewed the same system with the same scope, but identified severe weaknesses in the manufacturing application's security controls. What is MOST likely to be the root cause of the internal audit team's failure in detecting these security issues?

Question

Ahmed Emad · Accepted Answer

Inadequate test coverage analysis

Ahmed Emad · Answer

Inadequate security patch testing

Ahmed Emad · Answer

Inadequate log reviews

Ahmed Emad · Answer

Inadequate change control procedures

Question list

List of questions

Question 1

(1)

Question 2

(0)

Question 3

(0)

Question 4

(0)

Question 5

(0)

Question 6

(0)

Question 7

(0)

Question 8

(0)

Question 9

(0)

Question 10

(0)

Related questions

Question 1138 - CISSP discussion

Suggested answer: A

0 comments