A new CISO just started with a company and on the CISO's desk is the last complete Information Security Management audit report. The audit report is over two years old.
After reading it, what should be your first priority?

A. Review the recommendations and follow up to see if audit implemented the changes

B. Meet with audit team to determine a timeline for corrections

C. Have internal audit conduct another audit to see what has changed.

D. Contract with an external audit company to conduct an unbiased audit








 

Suggested Answer: A

Community Answer: C




This question is in 712-50 EC-Council Certified CISO (CCISO) Exam
For getting EC-Council Certified CISO (CCISO) Certificate




Disclaimers:
The website is not related to, affiliated with, endorsed or authorized by EC-Council.
Trademarks, certification & product names are used for reference only and belong to EC-Council.
The website does not contain actual questions and answers from EC-Council's Certification Exam.