A Chief Information Security Officer (CISO) Recently Changed Jobs into a New

question 339

Multiple Choice

A Chief Information Security Officer (CISO) recently changed jobs into a new industry. The CISO's first task is to write a new, relevant risk assessment for the organization. Which of the following would BEST help the CISO find relevant risks to the organization? (Choose two.)

• A) Perform a penetration test.
• B) Conduct a regulatory audit.
• C) Hire a third-party consultant.
• D) Define the threat model.
• E) Review the existing BIA.
• F) Perform an attack path analysis.

---

Definitions:

Disclosure

The action of making new or secret information known, which can be related to organizational practices, financial details, or personal data.

Goodwill

Refers to the intangible asset that arises when a business is acquired for more than the fair value of its net identifiable assets.

Legal Representation

The act of having a lawyer or attorney provide advice, advocacy, and support in legal matters.

Mediated Agreement

A resolution reached with the assistance of a neutral third party to resolve disputes.