Question 1 of 29
Upon reviewing the recent comprehensive risk assessment, the Chief Information Security Officer (CISO) has identified several critical vulnerabilities that require immediate remediation. The assessment highlights a significant risk of data exfiltration due to outdated encryption protocols and a high likelihood of ransomware attacks targeting unpatched legacy systems. The CISO is under pressure to implement solutions quickly but must also consider the organization\'s limited IT resources and the potential for operational disruption. Which of the following approaches best addresses this implementation challenge?
Develop a phased implementation plan, prioritizing controls that address the most critical risks identified in the assessment, such as upgrading encryption protocols and patching legacy systems, while carefully managing resource allocation and operational impact.
Immediately deploy all recommended security controls simultaneously across the entire organization to ensure maximum protection against all identified vulnerabilities.
Focus exclusively on implementing the least expensive security solutions that offer some level of protection, even if they do not fully address the highest-priority risks.
Prioritize the implementation of security controls that are easiest and quickest to deploy, regardless of their effectiveness in mitigating the most severe identified risks.

Preparing for CompTIA CySA+ Exam? Now land the interview.

73% of qualified candidates get rejected because of weak resumes. Build an ATS-optimized, recruiter-ready resume in under 5 minutes - free to start.

Build My Resume Free