CISM: Certified Information Security Manager

By Isaca · Question Mode

QuestionQ27

VerifiedInformation Security Program

Which of the following is the BEST method to determine whether a recent investment in access control software was successful?

Explanation

Control-investment success is best evaluated through outcome-based measures. A comparison of security incidents before and after the software is installed shows whether the access control has reduced relevant security events.

Community Discussion

No comments yet. Be the first to start the discussion!