A Chief Information Security Officer (CISO) Recently Changed Jobs into a New

question 38

Multiple Choice

A Chief Information Security Officer (CISO) recently changed jobs into a new industry. The CISO's first task is to write a new, relevant risk assessment for the organization. Which of the following help to the CISO find relevant risks to the organization? (Choose two.)

• A) Perform a penetration test.
• B) Conduct a regulatory audit.
• C) Hire a third-party consultant.
• D) Define the threat model.
• E) Review the existing BIA.
• F) Perform an attack path analysis.

---

Definitions:

Communication Flows

The ways in which information is transmitted within an organization or group, which can be upward, downward, or lateral.

Downward

A direction of communication or authority that flows from higher levels of a hierarchy to lower levels within an organization.

Upward

in a higher position or direction; often used to describe movements within an organization's hierarchy from lower to higher levels.

Lateral

Pertaining to or situated at the side; often refers to relationships or movements that are not hierarchical.