A new web application system was purchased from a vendor and configured by the internal development team. Before the web application system was moved into production, a vulnerability assessment was…

Question

Options

• ACISO immediately in an exception report.
• Busers of the new web application system.
• Cthe vendor who supplied the web application system.
• Dteam lead in a weekly report.

• A
  4% (1)
• B
  4% (1)
• D
  92% (23)

Explanation

A minor configuration issue discovered during pre-production assessment is a routine finding that belongs in normal development reporting channels - specifically to the team lead in the regular weekly report. Escalating a minor issue to the CISO (Option A) would be an inappropriate use of executive attention and violates the principle of proportional escalation. Notifying end users (Option B) is inappropriate for a pre-production system. Reporting to the vendor (Option C) is incorrect because the issue was a configuration problem introduced by the internal development team, not a vendor software defect. Severity determines the escalation path: minor issues go through standard channels, critical issues warrant immediate escalation.

No community discussion yet for this question.