Assessing Corporate Cybersecurityintermediate
Explain how an organization uses its Current Profile and Target Profile to develop an improvement plan.
Answer
The organization identifies current outcomes in the Current Profile and develops a risk-informed Target Profile describing desired outcomes. It overlays or compares the Profiles to identify gaps, analyzes and prioritizes those gaps, then implements an action plan to close them and move toward the target.
Explanation
### The concept
The Current Profile records outcomes currently being achieved. The Target Profile records desired, risk-informed outcomes. A gap analysis compares the two to identify where the current state does not meet the target. The organization then analyzes and prioritizes gaps and implements actions to address them. Prioritization supports decisions about what to do first using organizational risk and goals.
### What a good answer covers
- Define the Current Profile as the present state.
- Define the Target Profile as desired outcomes informed by risk.
- Compare the Profiles to identify gaps.
- Prioritize gaps and implement actions through an action plan.
### Remember
Profile comparison turns a desired state into prioritized improvement work.
Related Questions
- Outsourcing payment processing to a third-party vendor completely transfers all regulatory compliance and data protection responsibilities away from the hiring organization.(intermediate)
- In an incident management exercise divided into discovery, investigation, response, and recovery, the phase focused on analyzing logs, alerts, and evidence to examine unauthorized activity is called _____.(basic)
- The recovery and compliance review phase can include a mock audit, ongoing monitoring, staff training, and improvements informed by the incident.(basic)
- A staff member accesses the billing system from an unprotected personal laptop, and suspicious activity alerts appear. Which response area is most directly implicated by this new information?(intermediate)
- During a tabletop incident response exercise involving potential payment card data compromise, which activity is the primary focus of the Discovery phase?(advanced)
Want to practice more questions like this?
Join myBenkio free and practice past questions for your Nigerian university courses with AI explanations for every answer.
Start Practicing Free