QuestionQ87

VerifiedInformation Security Program

To establish effective continuous monitoring of IT controls, what must an information security manager ensure FIRST?

Explanation

Information-asset classification identifies an asset’s sensitivity, value, and required protection level, enabling risk-based selection and prioritization of the controls and metrics that require continuous monitoring. Alert centralization, system scans, and management reporting are operational or reporting activities that depend on that monitoring scope and priority being defined.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!