Discuss ISC2 CISSP Exam Topic 2 Question 58

Information Security Continuous Monitoring (1SCM) is defined as maintaining ongoing awareness of information security, vulnerabilities, and threats to support organizational risk management

decisions. Which of the following is the FIRST step in developing an ISCM strategy and implementing an ISCM program?

ADefine a strategy based on risk tolerance that maintains clear visibility into assets, awareness of vulnerabilities, up-to-date threat information, and mission/business impacts.

BConduct a vulnerability assessment to discover current threats against the environment and incorporate them into the program.

CRespond to findings with technical management, and operational mitigating activities or acceptance, transference/sharing, or avoidance/rejection.

DAnalyze the data collected and report findings, determining the appropriate response. It may be necessary to collect additional information to clarify or supplement existing monitoring data.

Suggested Answer: A

Get Premium CISSP Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

13 comments · newest first

Sylvie 11 months ago

C and D are more about response, not initial strategy.

Lauran 11 months ago

Wait, are we sure A is right? Seems too broad to start with.

Tammara 12 months ago

Totally agree with A, visibility is key!

Nenita 12 months ago

I think B makes more sense. You need to know your threats first!

Theresia 12 months ago

A is definitely the first step! Gotta define that strategy.

Cammy 1 year ago

Analyzing data and reporting findings seems like something we do after we've established a strategy, so I don't think that's the first step.

Teresita 1 year ago

I feel like responding to findings is more of a later step in the process, but I could see how some might think it’s part of the initial strategy.

Brent 1 year ago

I remember a practice question that emphasized the importance of understanding vulnerabilities first, which makes me lean towards conducting a vulnerability assessment as the first step.

Norah 1 year ago

I think the first step should be defining a strategy based on risk tolerance, but I'm not entirely sure if that's the very first thing we should do.

Alona 1 year ago

Okay, let's see. I know that route reflectors are used to reduce the number of BGP peering sessions within an AS, and that clusters can be configured to further optimize this. I'll need to double-check the specifics on how the clusters interact.

Shannon 1 year ago

I'm pretty confident the underlined text is incorrect. The right way to create a new group is to drag a tile to the far-right side of the Start screen and drop it there.

Andrew 1 year ago

Hmm, I'm not sure about this one. I know there's an option to create recurring tasks, but I'm not sure if that's the right approach here. I might need to think this through a bit more.

Mabel 1 year ago

Hmm, I'm not entirely sure about this one. I'll need to think it through carefully and review my notes on the WFM system architecture.

ISC2 CISSP Exam - Topic 2 Question 58 Discussion