CAS-001 · Question #386
Information security continuous monitoring is defined as maintaining ongoing awareness of information security, vulnerabilities, and threats to support organizational risk management decisions. What…
The correct answer is A. Ongoing assessment of system security controls C. Security status monitoring and reporting D. Security impact analyses E. Configuration management and change control. Information security continuous monitoring is defined as maintaining ongoing awareness of information security, vulnerabilities, and threats to support organizational risk management decisions. Following are the four essential elements required for continuous monitoring…
Question
Information security continuous monitoring is defined as maintaining ongoing awareness of information security, vulnerabilities, and threats to support organizational risk management decisions. What are the essential elements required for continuous monitoring? Each correct answer represents a complete solution. Choose all that apply.
Options
- AOngoing assessment of system security controls
- BSecurity tools definition
- CSecurity status monitoring and reporting
- DSecurity impact analyses
- EConfiguration management and change control
How the community answered
(25 responses)- A96% (24)
- B4% (1)
Explanation
Information security continuous monitoring is defined as maintaining ongoing awareness of information security, vulnerabilities, and threats to support organizational risk management decisions. Following are the four essential elements required for continuous monitoring: Configuration management and change control Security impact analyses Ongoing assessment of system security controls Security status monitoring and reporting
Topics
Community Discussion
No community discussion yet for this question.