A Chief Information Security Officer (CISO) Is Reviewing the Controls

question 272

Multiple Choice

A Chief Information Security Officer (CISO) is reviewing the controls in place to support the organization's vulnerability management program. The CISO finds patching and vulnerability scanning policies and procedures are in place. However, the CISO is concerned the organization is siloed and is not maintaining awareness of new risks to the organization. The CISO determines systems administrators need to participate in industry security events. Which of the following is the CISO looking to improve?

• A) Vendor diversification
• B) System hardening standards
• C) Bounty programs
• D) Threat awareness
• E) Vulnerability signatures

---

Definitions:

Accounts Receivable

Accounts receivable are funds owed to a company by customers who have received goods or services but have not yet paid for them.

Accounts Payable

The amounts a company owes to creditors for items or services purchased on credit which are due within a year or within a company's operating cycle.

Equipment

Tangible assets used in operations, such as machinery and computers, which are not intended for sale.

Owner's Equity

Owner's equity is the residual interest in the assets of the entity after deducting liabilities, representing the owner's claim on the business assets.