Which of the following choices is not considered a best practice when identifying threats? A. Verifying systems

Question:

Which of the following choices is not considered a best practice when identifying threats?

A. Verifying systems operate and are controlled as expected

B. Limiting the scope of the assessment

C. Considering threats to confidentiality, integrity, and availability

D. Assuming the systems have not changed since the last threat assessment

Fantastic news! We've Found the answer you've been seeking!

Step by Step Answer:

Related Book For  book-img-for-question

Managing Risk In Information Systems

ISBN: 9781284193602

3rd Edition

Authors: Darril Gibson, Andy Igonor

Question Posted: