Certified Information Security Manager (CISM) — Question 25

What is the PRIMARY benefit of effective configuration management?

Answer options

• A. Standardization of system support
• B. Reduced frequency of incidents
• C. Decreased risk to the organization's systems
• D. Improved vulnerability management

Correct answer: C

Explanation

The correct answer, C, highlights that effective configuration management helps in identifying and mitigating risks to the organization's systems, ensuring their integrity and security. While A, B, and D are benefits of configuration management, they are secondary to the overarching goal of risk reduction.