MENU
Which of the following should be the PRIMARY audience for a third-party technical security assessment report?
Suggested Answer: B
Get Premium CISA Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
12 comments · newest first
BL
Blondell
11 months ago
I’m surprised this is even a question, A is clearly the right choice!
AN
Angella
12 months ago
Wait, why would external regulators be the primary audience? Seems off.
TR
Trinidad
12 months ago
B makes more sense, they need to understand risks too.
CH
Charlette
12 months ago
Totally agree with A! They’re the ones implementing changes.
BE
Bette
1 year ago
I think it should be A, operational IT management needs the details.
MO
Mona
1 year ago
I’m leaning towards legal counsel, but I guess it depends on the context of the assessment.
PA
Paris
1 year ago
I practiced a question like this, and I feel like external regulators might be the right choice since they often require compliance reports.
JO
Johnna
1 year ago
I'm not entirely sure, but I remember something about the board of directors needing to understand security risks too.
SH
Sherly
1 year ago
I think the primary audience should be Operational IT management since they need to implement the recommendations directly.
GI
Gianna
1 year ago
Hmm, this one seems tricky. I'll need to think it through carefully.
PO
Portia
1 year ago
Hmm, I'm a bit unsure about the differences between the Production and Test environments. I'll need to think this through carefully.
RO
Rodolfo
1 year ago
I remember studying that once an ECS is created, its private IP address cannot be changed, so I think it's true.