CRISC: Certified in Risk and Information Systems ControlDemo

Question

Which of the following is MOST likely to prompt a penetration test?

A Loss of customer data is suspected.
B A disgruntled senior IT staff member has left the organization.
C An acquired company's systems are being integrated.
D A competitor's website was compromised.

Explanation

Integrating an acquired company’s systems materially changes the attack surface and can introduce unknown vulnerabilities, insecure configurations, and trust relationships. A penetration test helps identify and validate those risks before or during the integration.

CRISC: Certified in Risk and Information Systems ControlDemo

AstroTutor

Notes

Readiness

QuestionQ885

Community Discussion