Certified Chief Information Security Officer (CCISO) — Question 116

The patching and monitoring of systems on a consistent schedule is required by?

Answer options

• A. Industry best practices
• B. Audit best practices
• C. Risk Management framework
• D. Local privacy laws

Correct answer: C

Explanation

The correct answer is C, as the Risk Management framework emphasizes the importance of consistent patching and monitoring to mitigate vulnerabilities and manage risks effectively. Options A and B refer to general practices that may not specifically mandate such schedules, while D pertains to compliance with privacy regulations rather than system maintenance.