CRISC: Certified in Risk and Information Systems ControlDemo

By Isaca · Question Mode

QuestionQ1298

Risk Response and Reporting

An enterprise has received software patches that remediate vulnerabilities in its core business software. Before implementation, which of the following is the MOST important task to perform?

  • A Seek information from the software vendor to enable effective application of the patches.
  • B Assess the impact of applying the patches on the production environment.
  • C Determine in advance an off-peak period to apply the patches.
  • D Survey other enterprises regarding their experiences with applying these patches.
Explanation

Patches should be assessed and tested for their potential effect on production systems before deployment, because remediation can introduce operational disruptions or reduce service availability. Enterprise patch-management guidance includes planning, testing, deployment, and verification as core activities.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!