CISSP: Certified Information Systems Security Professional

By ISC · Question Mode

QuestionQ134

VerifiedSecurity Assessment and Testing

An organization bought commercial off-the-shelf (COTS) software several years ago. The information technology (IT) Director has decided to migrate the application to the cloud, but is concerned about the application security of the software in the organization's dedicated environment with a cloud service provider.

What is the BEST way to prevent and remediate the software's security weaknesses?

Explanation

A documented, effective software updating and patching process identifies, tests, deploys, and verifies vendor fixes for known vulnerabilities. Patches correct software security flaws and reduce opportunities for exploitation; this directly remediates weaknesses in COTS software regardless of where the dedicated environment is hosted.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!