Certified Information Systems Security Professional (CISSP) — Question 129

An organization acquired used technological equipment. This equipment will be integrated with new and existing business processes. What is the MOST appropriate consideration to identify the equipment that requires protection?

Answer options

• A. Total monetary value of the acquisition
• B. The age of the computing hardware
• C. Stakeholder concerns of how the assets are used
• D. Length and extent of support by the vendor

Correct answer: C

Explanation

The correct answer is C because stakeholder concerns are crucial in understanding how the assets will be used and what risks they may pose. While monetary value, age, and vendor support are important factors, they do not directly address the specific needs and potential vulnerabilities associated with the equipment's use in the business context.