CISSP: Certified Information Systems Security Professional

By ISC · Question Mode

QuestionQ257

VerifiedSecurity Assessment and Testing

An organization must evaluate how effective the security controls implemented on a new system are. Which of the following roles should the organization trust to perform this evaluation?

Explanation

A control assessor conducts security control assessments to determine whether controls are implemented correctly, operating as intended, and producing the desired security outcome. The role supplies the technical assessment on which system owners and authorizing officials rely.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!