Multiple Choice
A business unit within your organization intends to deploy a new technology in a manner that places it in violation of existing information security standards. What immediate action should the information security manager take?
A) Enforce the existing security standards and do not allow the deployment of the new technology.
B) If the risks associated with that technology are not already identified, perform a risk analysis to quantify the risk, and allow the business unit to proceed based on the identified risk level.
C) Amend the standard to permit the deployment.
D) Permit a 90-day window to see if an issue occurs and then amend the standard if there are no issues.
Correct Answer:
Verified
Correct Answer:
Verified
Q377: Office documents (Word, Excel, PowerPoint) contain a
Q378: The alerting, monitoring and life-cycle management of
Q379: A CISO decides to analyze the IT
Q380: When gathering security requirements for an automated
Q381: This organization maintains a database of hash
Q383: When setting up a wireless network with
Q384: Jessica works as systems administrator for a
Q385: A state department site was recently attacked
Q386: You are called in to assist the
Q387: The rule of thumb when shutting down