Which of the following is the PRIMARY objective of testing security controls within a critical infrastructure?

The correct answer is D. Ensuring the continued resilience and security of IT services. The primary purpose of testing security controls in critical infrastructure is to verify that those controls are functioning as intended to maintain the resilience and security of IT services. Critical infrastructure (power grids, water systems, financial systems, etc.) must…

Submitted by luis.pe· Apr 18, 2026Information Security Program Development and Management

Question

Options

AIdentifying and addressing security team performance issues
BDecreasing the percentage of security deployments that cause failures in production
CReducing the number of control assessments to optimize resources
DEnsuring the continued resilience and security of IT services

How the community answered

(57 responses)

A
2% (1)
B
5% (3)
C
2% (1)
D
91% (52)

Explanation

The primary purpose of testing security controls in critical infrastructure is to verify that those controls are functioning as intended to maintain the resilience and security of IT services. Critical infrastructure (power grids, water systems, financial systems, etc.) must remain operational and secure; control testing confirms this. Option A relates to HR performance management, not security control testing. Option B describes a DevOps/change management metric, not a security testing objective. Option C is counterproductive-reducing assessments would weaken the security posture, not improve it.

Topics

#Security control testing#Critical infrastructure security#IT resilience#Information security program management

Community Discussion

No community discussion yet for this question.

Full CISM Practice