Certified Information Systems Auditor (CISA) — Question 1116

Which of the following is the BEST approach to minimize the risk of devices being unavailable following a required firmware upgrade?

Answer options

• A. Deploy incrementally from a staging environment.
• B. Manually deploy to each device.
• C. Automatically deploy to all devices directly from the manufacturer.
• D. Roll into a mass distribution deployment.

Correct answer: A

Explanation

The best option is A because deploying incrementally allows for testing and validation of the firmware on a smaller scale before a full rollout, reducing the risk of widespread issues. Option B is less efficient and can introduce human error, while C and D could lead to all devices experiencing downtime if the firmware upgrade fails.