Information Security Continuous Monitoring (1SCM) is defined as maintaining ongoing awareness of information security, vulnerabilities, and threats to support organizational risk management decisions. Which of the following is the FIRST step in developing an ISCM strategy and implementing an ISCM program?

Question

Franco Santos · Accepted Answer

Define a strategy based on risk tolerance that maintains clear visibility into assets, awareness of vulnerabilities, up-to-date threat information, and mission/business impacts.

Franco Santos · Answer

Conduct a vulnerability assessment to discover current threats against the environment and incorporate them into the program.

Franco Santos · Answer

Respond to findings with technical management, and operational mitigating activities or acceptance, transference/sharing, or avoidance/rejection.

Franco Santos · Answer

Analyze the data collected and report findings, determining the appropriate response. It may be necessary to collect additional information to clarify or supplement existing monitoring data.

Question list

List of questions

Question 1

(1)

Question 2

(0)

Question 3

(0)

Question 4

(0)

Question 5

(0)

Question 6

(0)

Question 7

(0)

Question 8

(0)

Question 9

(0)

Question 10

(0)

Related questions

Question 1475 - CISSP discussion

Suggested answer: A

0 comments