WGU C795- Cybersecurity Management II – Tactical Latest Updated 2022 Graded A+

Document Content and Description Below

Security Tests Correct Answer-Security tests verify that a control is functioning properly. These tests include automated scans, tool-assisted penetration tests, and manual attempts to undermine sec... urity. Security testing should take place on a regular schedule, with attention paid to each of the key security controls protecting an organization. Security Assessments Correct Answer-Comprehensive reviews of the security of a system, application, or other tested environment. During a security assessment, a trained information security professional performs a risk assessment that identifies vulnerabilities in the tested environment that may allow a compromise and makes recommendations for remediation, as needed. NIST SP 800-53A Correct Answer-Guide for Assessing the Security Controls an privacy controls in Federal Information Systems Security Audits Correct Answer-Use many of the same techniques followed during security assessments but must be performed by independent auditors. Audits are performed with the purpose of demonstrating the effectiveness of controls to a third party. Auditors provide an impartial, unbiased view of the organization's security controls. Internal Audits Correct Answer-Performed by an organization's internal audit staff and are typically intended for internal audiences. External Audits Correct Answer-External audits are performed by an outside auditing firm. These audits have a high degree of external validity because the auditors performing the assessment theoretically have no conflict of interest with the organization itself. Audits [Show More]

Last updated: 1 year ago

Preview 1 out of 32 pages