Which of the following would be of GREATEST concern to an IS auditor evaluating the effectiveness of an organization’s vulnerability-scanning program?
Vulnerability-scanning results must reach individuals with the authority and responsibility to ensure that identified vulnerabilities are resolved. Without that reporting and accountability, vulnerabilities can remain unremediated despite being detected.
Community Discussion