WGU C795- Cybersecurity Management II – Tactical Latest Updated 2022 Graded A+

Security Tests Correct Answer-Security tests verify that a control is functioning properly. These tests include automated scans, tool-assisted penetration tests, and manual attempts to undermine security. Security testing should take place on a regular schedule, with attention paid to each of the key security controls protecting an organization. Security Assessments Correct Answer-Comprehensive reviews of the security of a system, application, or other tested environment. During a security assessment, a trained information security professional performs a risk assessment that identifies vulnerabilities in the tested environment that may allow a compromise and makes recommendations for remediation, as needed. NIST SP 800-53A Correct Answer-Guide for Assessing the Security Controls an privacy controls in Federal Information Systems Security Audits Correct Answer-Use many of the same techniques followed during security assessments but must be performed by independent auditors. Audits are performed with the purpose of demonstrating the effectiveness of controls to a third party. Auditors provide an impartial, unbiased view of the organization's security controls. Internal Audits Correct Answer-Performed by an organization's internal audit staff and are typically intended for internal audiences. External Audits Correct Answer-External audits are performed by an outside auditing firm. These audits have a high degree of external validity because the auditors performing the assessment theoretically have no conflict of interest with the organization itself. Auditsperformed by these firms are generally considered acceptable by most investors and governing body members.