An Organization Has Employed the Services of an Auditing Firm

question 415

Multiple Choice

An organization has employed the services of an auditing firm to perform a gap assessment in preparation for an upcoming audit. As part of the gap assessment, the auditor supporting the assessment recommends the organization engage with other industry partners to share information about emerging attacks to organizations in the industry in which the organization functions. Which of the following types of information could be drawn from such participation?

• A) Threat modeling
• B) Risk assessment
• C) Vulnerability data
• D) Threat intelligence
• E) Risk metrics
• F) Exploit frameworks

---

Definitions:

Account

A report or description of an event or experience, or the management and arrangement of financial expenditure and receipts.

Commission

A fee or percentage allowed to agents or salespeople for their services.

Salesperson

An individual who sells goods and services to others, aiming to meet customers' needs and ensure satisfaction.

Nurse

A healthcare professional who is skilled in promoting and maintaining health.