QuestionQ21Verified/Information Security ProgramCopy linkReport a problemAsk AstroTutorSave questionWhich of the following activities MUST an information security manager perform for change requests?AAssess impact on information security risk.BPerform penetration testing on affected systems.CScan IT systems for operating system vulnerabilities.DReview change in business requirements for information security.Show AnswerAnswerExplanationAn information security manager must assess how each proposed change affects information security risk so that appropriate controls, approvals, or mitigations can be applied before implementation.Show comments2Show commentsCommunity DiscussionNo comments yet. Be the first to start the discussion!
Community Discussion