<< Prev Question Next Question >>

Question 55/56

Scenario 9: OpenTech provides IT and communications services. It helps data communication enterprises and network operators become multi-service providers During an internal audit, its internal auditor, Tim, has identified nonconformities related to the monitoring procedures He identified and evaluated several system Invulnerabilities.
Tim found out that user IDs for systems and services that process sensitive information have been reused and the access control policy has not been followed After analyzing the root causes of this nonconformity, the ISMS project manager developed a list of possible actions to resolve the nonconformity. Then, the ISMS project manager analyzed the list and selected the activities that would allow the elimination of the root cause and the prevention of a similar situation in the future. These activities were included in an action plan The action plan, approved by the top management, was written as follows:
A new version of the access control policy will be established and new restrictions will be created to ensure that network access is effectively managed and monitored by the Information and Communication Technology (ICT) Department The approved action plan was implemented and all actions described in the plan were documented.
Based on this scenario, answer the following question:
OpenTech has decided to establish a new version of its access control policy. What should the company do when such changes occur?

LEAVE A REPLY

Your email address will not be published. Required fields are marked *

Question List (56q)
Question 1: Org Y. a well-known bank, uses an online banking platform th...
Question 2: Scenario 3: Socket Inc is a telecommunications company offer...
Question 3: Scenario 10: NetworkFuse develops, manufactures, and sells n...
Question 4: What risk treatment option has Company A implemented if it h...
Question 5: Why is the power/interest matrix used for?...
Question 6: Which statement is an example of risk retention?...
Question 7: Scenario 7: InfoSec is a multinational corporation headquart...
Question 8: Which of the following is the information security committee...
Question 9: Diana works as a customer service representative for a large...
Question 10: The purpose of control 5.9 inventory of Information and othe...
Question 11: An organization wants to enable the correlation and analysis...
Question 12: Scenario 8: SunDee is an American biopharmaceutical company,...
Question 13: Scenario 5: Operaze is a small software development company ...
Question 14: Scenario 5: Operaze is a small software development company ...
Question 15: Which situation described in scenario 7 Indicates that Texas...
Question 16: Scenario 7: InfoSec is a multinational corporation headquart...
Question 17: According to scenario 2, Solena decided to issue a press rel...
Question 18: An organization has established a policy that provides the p...
Question 19: Scenario 5: Operaze is a small software development company ...
Question 20: FinanceX, a well-known financial institution, uses an online...
Question 21: An employee of the organization accidentally deleted custome...
Question 22: What is the main purpose of Annex A 7.1 Physical security pe...
Question 23: Based on scenario 9. is the action plan for treating the non...
Question 24: An organization documented each security control that it Imp...
Question 25: Scenario 3: Socket Inc is a telecommunications company offer...
Question 26: Who should be involved, among others, in the draft, review, ...
Question 27: Scenario 8: SunDee is an American biopharmaceutical company,...
Question 28: Del&amp;Co has decided to improve their staff-related contro...
Question 29: Scenario 6: Skyver offers worldwide shipping of electronic p...
Question 30: Company X restricted the access of the internal auditor of s...
Question 31: Based on scenario 2. which principle of information security...
Question 32: An organization uses Platform as a Services (PaaS) to host i...
Question 33: Scenario 6: Skyver offers worldwide shipping of electronic p...
Question 34: Scenario 2: Beauty is a cosmetics company that has recently ...
Question 35: Which option below should be addressed in an information sec...
Question 36: Upon the risk assessment outcomes. Socket Inc. decided to: *...
Question 37: An organization documented each security control that it Imp...
Question 38: Scenario 5: Operaze is a small software development company ...
Question 39: According to scenario 6. Alex used terminology and concepts ...
Question 40: The IT Department of a financial institution decided to impl...
Question 41: Based on scenario 5. Socket Inc. decided to assign users lo ...
Question 42: Scenario 10: NetworkFuse develops, manufactures, and sells n...
Question 43: Which situation presented in scenario 8 is not in compliance...
Question 44: Scenario 1: HealthGenic is a pediatric clinic that monitors ...
Question 45: According to scenario 7, the team prevented a potential atta...
Question 46: Once they made sure that the attackers do not have access in...
Question 47: How can Invalid Electric's ensure that Us employees are prep...
Question 48: Based on scenario 9. the top management decided to accept th...
Question 49: Scenario 10: NetworkFuse develops, manufactures, and sells n...
Question 50: Why should the security testing processes be defined and imp...
Question 51: Scenario 1: HealthGenic is a pediatric clinic that monitors ...
Question 52: TradeB communicated the information security processes and p...
Question 53: Scenario 2: Beauty is a cosmetics company that has recently ...
Question 54: Following a repotted event, an Information security event ti...
Question 55: Scenario 9: OpenTech provides IT and communications services...
Question 56: Scenario 8: SunDee is an American biopharmaceutical company,...