nerdexam
(ISC)2

CGRC · Question #471

Assessment plans should be prepared _______ of the testing and forwarded to all involved for review and approval. Response:

The correct answer is A. Well in advance. Assessment plans should be prepared well in advance of testing and distributed to all involved parties for their review and approval.

Assessment/Audit of Security and Privacy Controls

Question

Assessment plans should be prepared _______ of the testing and forwarded to all involved for review and approval. Response:

Options

  • AWell in advance
  • BQuickly
  • CWithin 24 hrs of start
  • DAt the end

How the community answered

(28 responses)
  • A
    93% (26)
  • B
    4% (1)
  • D
    4% (1)

Why each option

Assessment plans should be prepared well in advance of testing and distributed to all involved parties for their review and approval.

AWell in advanceCorrect

Preparing assessment plans well in advance allows sufficient time for all stakeholders to review, provide feedback, and approve the plan, ensuring alignment on the scope, methodology, and resources before testing commences. This proactive approach helps to prevent delays and ensures the assessment is conducted effectively and efficiently.

BQuickly

Preparing quickly does not guarantee thoroughness or stakeholder alignment, which are critical for effective assessment planning.

CWithin 24 hrs of start

Preparing within 24 hours of start is typically too late for proper review and approval processes, which are essential for complex assessments.

DAt the end

Preparing at the end of testing defeats the fundamental purpose of an assessment plan, which is to guide the testing process from the outset.

Concept tested: Security assessment planning best practices

Topics

#Assessment planning#Security assessment#Compliance assessment

Community Discussion

No community discussion yet for this question.

Full CGRC Practice