What is the PRIMARY benefit of effective configuration management?

The correct answer is C. Decreased risk to the organization's systems. Configuration management ensures that systems are built, maintained, and changed in a controlled, documented, and secure manner. By preventing unauthorized or insecure configurations - which are a leading cause of vulnerabilities - it directly reduces the risk of exploitation…

Submitted by thandi_sa· Apr 18, 2026Information Security Risk Management

Question

Options

AReduced management cost
BReduced incident frequency
CDecreased risk to the organization's systems
DImproved patch management process

How the community answered

(63 responses)

A
6% (4)
B
5% (3)
C
87% (55)
D
2% (1)

Explanation

Configuration management ensures that systems are built, maintained, and changed in a controlled, documented, and secure manner. By preventing unauthorized or insecure configurations - which are a leading cause of vulnerabilities - it directly reduces the risk of exploitation across the organization's systems. Reduced management cost (A) and improved patch management (D) are secondary benefits. Reduced incident frequency (B) is also a downstream benefit, but the root cause of that reduction is the decreased risk achieved through controlled configurations.

Topics

#Configuration Management#Risk Reduction#Information Security Controls#System Hardening

Community Discussion

No community discussion yet for this question.

Full CISM Practice