MENU
The BEST way to identify the risk associated with a social engineering attack is to
An organization has acquired a company that manufactures Internet of Things (loT) devices
What should the information security manager do NEXT?
Suggested Answer: B
Get Premium CISM Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
11 comments · newest first
EL
Elmer
11 months ago
Audit reports are important too, can't overlook them!
LA
Laura
12 months ago
Surprised that updating the security strategy isn't the top priority!
NA
Na
12 months ago
But shouldn't we conduct a vulnerability assessment first?
JO
Jodi
12 months ago
Definitely agree, those agreements can reveal a lot!
WI
William
1 year ago
I think reviewing data sharing agreements is crucial.
BR
Brock
1 year ago
This question reminds me of a practice question we did on mergers. I think conducting a vulnerability assessment is crucial, but I’m not completely confident.
LI
Lindsey
1 year ago
I’m a bit confused about whether updating the security strategy is necessary right away. Shouldn’t we assess the current situation first?
NI
Nieves
1 year ago
I think reviewing audit reports could help identify existing vulnerabilities, but I feel like a vulnerability assessment might be more proactive.
DU
Dusti
1 year ago
I remember we discussed the importance of understanding data sharing agreements in class, but I'm not sure if that's the immediate next step here.
MI
Mitzie
1 year ago
Okay, let's see here. The question is asking about a common obstacle, so I'm thinking the best approach would be to recommend a solution that addresses a common pain point in the current case assignment process. Migrating to Omni-Channel could be an interesting option to explore.
LI
Lina
1 year ago
I think the answer is C. The question is asking about the Employee Restrictions Field, and C says "Own and Subordinates Only", which sounds like it would allow a Support Manager to view cases assigned to their direct reps.