Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

ISC2 CSSLP Exam - Topic 3 Question 4 Discussion

Posted by Arthur on May 03, 2022 at 07:12 PM

Which of the following individuals inspects whether the security policies, standards, guidelines, and procedures are efficiently performed in accordance with the company's stated security objectives?

Suggested Answer: D

An information system auditor is an individual who inspects whether the security policies, standards, guidelines, and procedures are efficiently

performed in accordance with the company's stated security objectives. He is responsible for reporting the senior management about the

value of security controls by performing regular and independent audits.

Answer B is incorrect. A data owner determines the sensitivity or classification levels of data.

Answer A is incorrect. An informational systems security professional is an individual who designs, implements, manages, and reviews

the security policies, standards, guidelines, and procedures of the organization. He is responsible to implement and maintain security by the

senior-level management.

Answer C is incorrect. A senior management assigns overall responsibilities to other individuals.


Get Premium CSSLP Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test
14 comments · newest first
DE
Deonna 11 months ago
The auditor checks compliance, so yeah, it's D!
AM
Ammie 12 months ago
Wait, are we sure about that? Sounds off.
MA
Maricela 12 months ago
Nope, it's the information system security professional.
LA
Lauran 12 months ago
I thought it was the senior management.
JO
Joesph 1 year ago
Definitely the Information system auditor!
GI
Gilma 1 year ago
I could see the data owner having some responsibility, but I feel like they wouldn't be the ones inspecting compliance directly.
NO
Novella 1 year ago
I practiced a similar question where the auditor was the one checking for adherence to policies. That makes me lean towards option D.
LE
Leota 1 year ago
I'm not entirely sure, but I remember something about senior management being responsible for oversight.
KE
Kerry 1 year ago
I think the information system auditor is the right choice since they usually evaluate compliance with security policies.
JE
Jesus 1 year ago
This seems like a tricky question. I'll need to carefully read through the requirements to make sure I understand the full scope of the testing needed.
MI
Mirta 1 year ago
I'm pretty sure the answer is A. ERR$ is the standard table name used by ODI to store error records.
KE
Kenneth 1 year ago
Provision of project support resources to projects - that seems like it could be the right answer. I'll mark that one down.
CL
Clarence 1 year ago
Hmm, I'm not entirely sure which three objectives would be the most appropriate. I'll need to carefully consider each option and how it aligns with the industry.
MA
Marguerita 1 year ago
I think the key here is understanding the role of the controlled directory number. Based on the options, it seems to be responsible for connecting voice contacts to the ACCS contact router, so I'll go with A.
0/2000 characters

Save Cancel