Certbie
Question 1 of 30
An organization is implementing a new cloud-based storage solution for its financial transaction records. A comprehensive risk assessment has identified a significant threat of unauthorized access and modification of these records, which could lead to financial fraud and severe regulatory penalties under financial services compliance frameworks. Considering the principles outlined in ISO/IEC 27040:2015, which of the following control selection criteria would be the most critical for ensuring the security of this storage environment?
Prioritizing controls that directly address the identified risks of unauthorized access and modification, ensuring compliance with financial regulations and demonstrating due diligence.
Selecting controls based solely on the lowest cost of implementation, assuming that any security measure is better than none.
Focusing on controls that offer the broadest range of functionalities, regardless of their specific relevance to the identified threats to financial transaction data.
Opting for controls that are widely adopted across the industry, without a specific evaluation of their effectiveness against the organization's unique threat landscape.

Preparing for ISO/IEC 27040:2015 - Storage Security Lead Implementer? Now land the interview.

73% of qualified candidates get rejected because of weak resumes. Build an ATS-optimized, recruiter-ready resume in under 5 minutes - free to start.

Build My Resume Free