CISSP: Certified Information Systems Security Professional

By ISC · Question Mode

QuestionQ133

VerifiedSecurity Assessment and Testing

When setting expectations during a review of security-test results, which of the following statements is MOST important to communicate to reviewers?

Explanation

Security-test results describe the security posture observed at the time and within the scope of the assessment; later configuration, software, operational, or threat changes can make those results no longer representative. NIST characterizes a control assessment as a snapshot in time.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!