CISSP: Certified Information Systems Security Professional

Question

An organization experiences a major data breach only one month after successfully completing an external cyber security audit. Which of the following is the most likely reason for this outcome?

Explanation

An audit pass can reflect only that the organization met the minimum required control threshold at the time of assessment. Minimum controls may be insufficient to prevent a major breach, particularly when control effectiveness, coverage, and ongoing security risk are not mature.

CISSP: Certified Information Systems Security Professional

AstroTutor

Notes

Readiness

QuestionQ104

Community Discussion