A Chief Information Security Officer (CISO) Recently Changed Jobs into a New

question 339

Multiple Choice

A Chief Information Security Officer (CISO) recently changed jobs into a new industry. The CISO's first task is to write a new, relevant risk assessment for the organization. Which of the following would BEST help the CISO find relevant risks to the organization? (Choose two.)

• A) Perform a penetration test.
• B) Conduct a regulatory audit.
• C) Hire a third-party consultant.
• D) Define the threat model.
• E) Review the existing BIA.
• F) Perform an attack path analysis.

---

Definitions:

Blush

A natural reddening of the face typically prompted by emotional states such as embarrassment or happiness.

Cultural Factors

Elements influenced by a society's culture, traditions, and practices that can affect behavior, perceptions, and interactions.

Business Communications

The exchange of information, both verbal and written, used to promote an organization's goals, ideas, and objectives.