712-50 · Question #294
Scenario: You are the CISO and have just completed your first risk assessment for your organization. You find many risks with no security controls, and some risks with inadequate controls. You…
The correct answer is C. Quarterly. The most appropriate frequency for the CISO to audit newly adjusted security controls is Quarterly. While annual audits are important for general security posture, quarterly audits provide a more proactive approach to verifying the effectiveness of newly implemented controls…
Question
Scenario: You are the CISO and have just completed your first risk assessment for your organization. You find many risks with no security controls, and some risks with inadequate controls. You assign work to your staff to create or adjust existing security controls to ensure they are adequate for risk mitigation needs. When adjusting the controls to mitigate the risks, how often should the CISO perform an audit to verify the controls?
Options
- AAnnually
- BSemi-annually
- CQuarterly
- DNever
How the community answered
(36 responses)- A11% (4)
- B8% (3)
- C78% (28)
- D3% (1)
Explanation
The most appropriate frequency for the CISO to audit newly adjusted security controls is Quarterly. While annual audits are important for general security posture, quarterly audits provide a more proactive approach to verifying the effectiveness of newly implemented controls after a risk assessment, allowing for quicker adjustments if needed.
Topics
Community Discussion
No community discussion yet for this question.