CISA: Certified Information Systems Auditor

By Isaca · Question Mode

QuestionQ83

VerifiedProtection of Information Assets

Which of the following would be of GREATEST concern to an IS auditor evaluating the effectiveness of an organization’s vulnerability-scanning program?

Explanation

Vulnerability-scanning results must reach individuals with the authority and responsibility to ensure that identified vulnerabilities are resolved. Without that reporting and accountability, vulnerabilities can remain unremediated despite being detected.

Community Discussion

No comments yet. Be the first to start the discussion!