CISSP Question of the Week: Security Management Life Cycle

CISSP Question of the Week courtesy of Transcender Labs.

As your organization’s security administrator, you are reviewing the audit results to assess if your organization’s security baselines are maintained. In which phase of the security management life cycle are you engaged?

A. Plan and Organize
B. Implement
C. Operate and Maintain
D. Monitor and Evaluate

Reveal Answer

The correct answer is D.

You are engaged in the Monitor and Evaluate phase of the security management life cycle. This phase includes the following components:

• Review logs, audit results, metrics, and service level agreements.
• Assess accomplishments.
• Complete quarterly steering committee meetings.
• Develop improvement steps for integration into Plan and Organize phase.
• Reviewing audits is not part of any of the other phases.

 

Related Course
CISSP Certification Prep Course

CISSP Question of the Week Series

• CISSP Question of the Week: Pillar of Basel II
• CISSP Question of the Week: Implement Redundant Servers
• CISSP Question of the Week: Terrorist Attacks
• CISSP Question of the Week: Customer Credit Card Information
• CISSP Question of the Week: Complex Instruction Set Computers
• CISSP Question of the Week: Asymmetric Encryption
• CISSP Question of the Week: OSI Layer for Formatting Data
• CISSP Question of the Week: Secure Communications
• CISSP Question of the Week: Biometric System and Fingerprinting Technology
• CISSP Question of the Week: Security Management Life Cycle

from
CERTIVIEW