CGRC · Question #578
True or False. Impacts of changes should be known in advance so that appropriate actions can be taken before vulnerabilities are experienced. Response:
The correct answer is A. True. It is true that the impacts of changes should be understood in advance to proactively address potential vulnerabilities and prevent adverse security events. This principle is fundamental to effective change management and risk mitigation.
Question
True or False. Impacts of changes should be known in advance so that appropriate actions can be taken before vulnerabilities are experienced. Response:
Options
- ATrue
- BFalse
How the community answered
(42 responses)- A90% (38)
- B10% (4)
Why each option
It is true that the impacts of changes should be understood in advance to proactively address potential vulnerabilities and prevent adverse security events. This principle is fundamental to effective change management and risk mitigation.
Understanding the potential impacts of changes in advance is a core principle of effective change management and risk assessment. By identifying potential vulnerabilities or unintended consequences beforehand, an organization can implement mitigating controls or adjust the change to prevent security issues.
Failing to assess the impacts of changes beforehand can lead to the introduction of new vulnerabilities, system instability, or security breaches, making it a critical aspect of secure operations.
Concept tested: Change management and risk assessment
Source: https://nvlpubs.nist.gov/nistpubs/Legacy/SP/nistspecialpublication800-128.pdf
Topics
Community Discussion
No community discussion yet for this question.