An insurance company is looking to purchase a smaller company in another country. Which of the following tasks would the security administrator perform as part of the security due diligence?

The correct answer is B. Review the security policies and standards. IT security professionals should have a chance to review the security controls and practices of a company targeted for acquisition. Any irregularities that are found should be reported to management so that expenses and concerns are properly identified.

Risk Management

Question

Options

AReview switch and router configurations
BReview the security policies and standards
CPerform a network penetration test
DReview the firewall rule set and IPS logs

How the community answered

(37 responses)

A
8% (3)
B
73% (27)
C
16% (6)
D
3% (1)

Explanation

IT security professionals should have a chance to review the security controls and practices of a company targeted for acquisition. Any irregularities that are found should be reported to management so that expenses and concerns are properly identified.

Topics

#security due diligence#mergers and acquisitions#security policies#risk assessment

Community Discussion

No community discussion yet for this question.

Full CAS-003 Practice