CRISC: Certified in Risk and Information Systems ControlDemo

Question

What is the BEST recommendation for reducing the risk of a potential system compromise when a vendor no longer releases security patches and updates for a business-critical legacy system?

A Ensure regular backups take place.
B Install antivirus software on the system.
C Virtualize the system in the cloud.
D Segment the system on its own network.

Explanation

Network segmentation isolates an unsupported legacy system and limits its communications with other network assets. This reduces exposure to attacks and constrains lateral movement if the system is compromised, addressing the risk created by the absence of vendor security patches.

CRISC: Certified in Risk and Information Systems ControlDemo

AstroTutor

Notes

Readiness

QuestionQ1724

Community Discussion