A business unit within your organization intends to deploy a new technology in a manner that places it in violation of existing information security standards.
What immediate action should the information security manager take?

A. Enforce the existing security standards and do not allow the deployment of the new technology.

B. If the risks associated with that technology are not already identified, perform a risk analysis to quantify the risk, and allow the business unit to proceed based on the identified risk level.

C. Amend the standard to permit the deployment.

D. Permit a 90-day window to see if an issue occurs and then amend the standard if there are no issues.








 

Suggested Answer: B





This question is in 712-50 Certified CISO (CCISO) Exam
For getting Certified CISO (CCISO)







Disclaimers:
The website is not related to, affiliated with, endorsed or authorized by EC-Council. 
Trademarks, certification & product names are used for reference only and belong to EC-Council.
The website does not contain actual questions and answers from EC-Council's Certification Exams.