CISM: Certified Information Security ManagerDemo

Question

A daily monitoring report shows that an IT employee changed a firewall rule outside the change-control process. What should be the information security manager's FIRST step in addressing the issue?

A perform an analysis of the change.
B report the event to senior management.
C require that the change be reversed.
D review the change management process.

Explanation

The change should first be analyzed to determine its scope, authorization status, security impact, and operational consequences. That assessment provides the basis for an appropriate decision to remediate, escalate, or improve the change-management process.

CISM: Certified Information Security ManagerDemo

AstroTutor

Notes

Readiness

QuestionQ949

Community Discussion