A Chief Information Security Officer (CISO) Is Reviewing the Results

question 172

Multiple Choice

A Chief Information Security Officer (CISO) is reviewing the results of a gap analysis with an outside cybersecurity consultant. The gap analysis reviewed all procedural and technical controls and found the following: High-impact controls implemented: 6 out of 10 Medium-impact controls implemented: 409 out of 472 Low-impact controls implemented: 97 out of 1000 The report includes a cost-benefit analysis for each control gap. The analysis yielded the following information: Average high-impact control implementation cost: $15,000; Probable ALE for each high-impact control gap: $95,000 Average medium-impact control implementation cost: $6,250; Probable ALE for each medium-impact control gap: $11,000 Due to the technical construction and configuration of the corporate enterprise, slightly more than 50% of the medium-impact controls will take two years to fully implement. Which of the following conclusions could the CISO draw from the analysis?

• A) Too much emphasis has been placed on eliminating low-risk vulnerabilities in the past
• B) The enterprise security team has focused exclusively on mitigating high-level risks
• C) Because of the significant ALE for each high-risk vulnerability, efforts should be focused on those controls
• D) The cybersecurity team has balanced residual risk for both high and medium controls

Identify the structural components of flowers and their contributions to plant reproduction.

Describe the mechanisms and adaptive strategies plants use to protect themselves against herbivory.

Understand the ploidy levels within the plant life cycle, including gametes and the zygote.

Comprehend the role of plant hormones in seed germination and dormancy.

---

Definitions:

Critical Thinking

is the process of actively analyzing, assessing, and synthesizing information to form a reasoned judgement.

Skeptical Peer Review

The process of critically evaluating the validity and quality of a research work by experts in the same field who are not part of the research team.

Wishful Thinking

The formation of beliefs or making decisions based on what is pleasing to imagine rather than on evidence, rationality, or reality.

Action System

A structured set of activities designed to achieve specific goals or outcomes.