Discuss Exin ITSM20FB Exam Topic 9 Question 49

Which of the following is a best practice concerning information securitycha risk assessment?

AInformation security risk assessments should be carried out by an external auditor to maintain objectivity.

BInformation security risk assessments should be performed as a result of the review of every incident.

CInformation security risk assessments should be performed at agreed intervals and be maintained during changes.

DInformation security risk assessments should be performed once a year.

Suggested Answer: C

Get Premium ITSM20FB Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

12 comments · newest first

Dexter 11 months ago

Wait, people actually think once a year is enough? That's wild!

Jamika 11 months ago

I agree with C, but why not just do it after every incident too?

Ashton 11 months ago

A yearly assessment like D is just not enough anymore.

Daryl 11 months ago

Not sure about that, C seems too vague.

Laine 12 months ago

I think option C is spot on! Regular assessments are key.

Mollie 12 months ago

I remember discussing D in class, but performing assessments just once a year seems risky. I think more frequent evaluations are necessary.

Ricarda 12 months ago

I practiced a question similar to this, and I believe B is too reactive. It seems better to have a proactive schedule for assessments.

Bobbie 1 year ago

I'm not sure about A. I feel like external auditors can be helpful, but I also recall that internal teams have valuable insights.

Jesus 1 year ago

I think option C sounds familiar; I remember studying that regular assessments are crucial, especially during changes.

Cassi 1 year ago

Okay, the key here is that the Webex Hybrid Message service is deployed geographically, so I'm pretty sure the answer is geo-locations.

Artie 1 year ago

Hmm, I'm a bit unsure on this one. I know we need to run some kind of formal tender process, but I'm not totally clear on the differences between the options. Maybe I should re-read the question more carefully.

Zack 1 year ago

Hmm, I'm a bit unsure about this one. I know Distribute Information is part of the Communications Management knowledge area, but I can't quite remember what the specific outputs are. I'll have to think this through carefully.

Exin ITSM20FB Exam - Topic 9 Question 49 Discussion