nerdexam
CompTIA

CAS-003 · Question #336

Which of the following is an external pressure that causes companies to hire security assessors and penetration testers?

The correct answer is D. Regulatory insistence on independent reviews. External pressures originate outside the organization. Regulations such as PCI DSS, HIPAA, SOX, and FISMA explicitly require organizations to undergo independent third-party security assessments. Because these mandates come from regulatory bodies - not internal management…

Risk Management

Question

Which of the following is an external pressure that causes companies to hire security assessors and penetration testers?

Options

  • ALack of adequate in-house testing skills.
  • BRequirements for geographically based assessments
  • CCost reduction measures
  • DRegulatory insistence on independent reviews.

How the community answered

(34 responses)
  • B
    3% (1)
  • C
    6% (2)
  • D
    91% (31)

Explanation

External pressures originate outside the organization. Regulations such as PCI DSS, HIPAA, SOX, and FISMA explicitly require organizations to undergo independent third-party security assessments. Because these mandates come from regulatory bodies - not internal management decisions - they represent a true external pressure. Options A and C are internal business decisions (skill gaps and cost control). Option B (geography-based assessments) is a niche operational consideration, not a recognized primary external driver for hiring independent assessors.

Topics

#regulatory compliance#independent security review#penetration testing drivers

Community Discussion

No community discussion yet for this question.

Full CAS-003 Practice