Assessing Corporate Cybersecurityintermediate
Arrange the following assessment logic in a sensible sequence: choose an implementation solution, identify the required security outcome, assess whether the outcome is achieved.
Answer
Identify the required security outcome from the organization's objective., Choose an implementation solution to pursue that outcome., Assess whether the chosen approach achieves the required outcome.
Explanation
### The order
1. **Identify the required security outcome from the organization's objective.** The outcome is what the standard says must be achieved.
2. **Choose an implementation solution to pursue that outcome.** The solution is selected to put the requirement into practice.
3. **Assess whether the chosen approach achieves the required outcome.** Assessment checks results rather than assuming that selecting a solution proves success.
### The concept
This sequence follows the distinction in the course material between a standard and its implementation. The standard sets the expected outcome, while implementation choices are separate. An assessment then checks whether the organization's approach meets the requirement.
### Terms
- **Assessment**: A structured evaluation of whether security requirements are being met.
- **Implementation solution**: A method or choice used to put a requirement into practice.
### Remember
Set the outcome before selecting a solution, then assess the result.
Related Questions
- Outsourcing payment processing to a third-party vendor completely transfers all regulatory compliance and data protection responsibilities away from the hiring organization.(intermediate)
- In an incident management exercise divided into discovery, investigation, response, and recovery, the phase focused on analyzing logs, alerts, and evidence to examine unauthorized activity is called _____.(basic)
- The recovery and compliance review phase can include a mock audit, ongoing monitoring, staff training, and improvements informed by the incident.(basic)
- A staff member accesses the billing system from an unprotected personal laptop, and suspicious activity alerts appear. Which response area is most directly implicated by this new information?(intermediate)
- During a tabletop incident response exercise involving potential payment card data compromise, which activity is the primary focus of the Discovery phase?(advanced)
Want to practice more questions like this?
Join myBenkio free and practice past questions for your Nigerian university courses with AI explanations for every answer.
Start Practicing Free