CAS-003 · Question #430
A Chief Information Securiy Officer (CISO) is reviewing technical documentation from various regional offices and notices some key differences between these groups. The CISO has not discovered any…
The correct answer is D. The network has competing standards in use. The absence of governance documentation combined with visible differences in networking across regional offices indicates that different regions have independently adopted different (potentially incompatible) networking standards. The most immediate concern is 'competing…
Question
A Chief Information Securiy Officer (CISO) is reviewing technical documentation from various regional offices and notices some key differences between these groups. The CISO has not discovered any governance documentation. The CISO creates the following chart to visualize the differences among the networking used. Which of the following would be the CISO's MOST immediate concern?
Exhibit
Options
- AThere are open standards in use on the network.
- BNetwork engineers have ignored defacto standards.
- CNetwork engineers are not following SOPs.
- DThe network has competing standards in use.
How the community answered
(23 responses)- A9% (2)
- B4% (1)
- C9% (2)
- D78% (18)
Explanation
The absence of governance documentation combined with visible differences in networking across regional offices indicates that different regions have independently adopted different (potentially incompatible) networking standards. The most immediate concern is 'competing standards in use' because this creates interoperability gaps, inconsistent security postures, and unpredictable behavior across the network - all of which undermine centralized security management. While lack of SOPs (C) is a related concern, it is secondary; the SOPs don't exist precisely because no governance exists. Open standards (A) are not inherently bad. Ignoring de facto standards (B) is a consequence, not the root concern. Competing standards is the direct, visible, highest-priority finding.
Topics
Community Discussion
No community discussion yet for this question.