Certified in Risk and Information Systems Control (CRISC) — Question 1445

Implementing which of the following will BEST help ensure that systems comply with an established baseline before deployment?

Answer options

• A. Continuous monitoring and alerting.
• B. Access controls and active logging.
• C. Configuration management.
• D. Vulnerability scanning.

Correct answer: C

Explanation

Configuration management is crucial as it ensures that systems are set up and maintained in accordance with established baselines. Continuous monitoring, access controls, and vulnerability scanning are important security practices, but they do not specifically focus on maintaining configuration standards before deployment.