An experienced information security manager joins a new organization and begins by conducting an audit of all key IT processes. Which of the following findings about the vulnerability management program should be of GREATEST concern?

Question

Derek Steven Schulte · Accepted Answer

Identified vulnerabilities are not logged and resolved in a timely manner.

Derek Steven Schulte · Answer

Identified vulnerabilities are not published and communicated in awareness programs.

Derek Steven Schulte · Answer

The number of vulnerabilities identified exceeds industry benchmarks. D. Vulnerabilities are identified by internal staff rather than by external consultants.

Question list

List of questions

Question 1

(0)

Question 2

(0)

Question 3

(0)

Question 4

(0)

Question 5

(0)

Question 6

(0)

Question 7

(0)

Question 8

(0)

Question 9

(0)

Question 10

(0)

Related questions

Question 742 - CISM discussion

Suggested answer: B

0 comments