QuestionQ117

Information Security Management

An organization relies on a supplier to provide data for a critical service. The supplier operates a database system that forms part of the organization’s infrastructure, creating a risk that the supplier’s system could be used to launch an attack against the organization’s systems.

What will MOST help the organization manage this risk?

  • A Analysis and reporting tools
  • B Knowledge management system
  • C Information security audit
  • D Network isolation
Explanation

Network isolation segregates the supplier-managed database environment from the organization’s other systems, reducing the opportunity for an attacker who compromises the supplier’s system to move into or attack the organization’s infrastructure.

Community Discussion

No comments yet. Be the first to start the discussion!