Certified Information Security Manager CISM · Free Practice Question Easy
Question 126
During an audit of a data center's IT architecture, the information security manager uncovers the absence of necessary encryption for data communications. What is the NEXT step to be taken?
- A A. Assess alternative measures for compensation.
- B B. Immediately implement encryption protocols.
- C C. Escalate the issue to senior management.
- D D. Document the finding in the audit report.
Reveal correct answer
Correct answer: A
Explanation
Correct Answer: A. Assess alternative measures for compensation. Explanation: The next step for the information security manager is to assess alternative measures for compensation. This involves exploring other security measures or controls that can be implemented to compensate for the absence of encryption, ensuring the continued protection of sensitive data during data communications.Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
You must be logged in to post a comment.
