A financial institution's business unit plans to deploy a new technology in a manner that violates existing information security standards. Which of the following actions should the Chief Information Security Officer (CISO) take to manage any type of violation?
A) Enforce the existing security standards and controls
B) Perform a risk analysis and qualify the risk with legal
C) Perform research and propose a better technology
D) Enforce the standard permits

Question

Quizplus · Accepted Answer

The CISO should perform a risk analysis to understand the potential impact of the violation and consult with legal to ensure compliance and manage any legal risks.

A Financial Institution's Business Unit Plans to Deploy a New