A Chief Information Security Officer (CISO Is Reviewing and Revising

question 398

Multiple Choice

A Chief Information Security Officer (CISO is reviewing and revising system configuration and hardening guides that were developed internally and have been used several years to secure the organization's systems. The CISO knows improvements can be made to the guides. Which of the following would be the BEST source of reference during the revision process?

• A) CVE database
• B) Internal security assessment reports
• C) Industry-accepted standards
• D) External vulnerability scan reports
• E) Vendor-specific implementation guides