Implementing Control Assurance Frameworks CCISO Practice Questions (Page 7)

Questions 31–35

1. 31application · medium

   A manufacturing company has selected the NIST Cybersecurity Framework (CSF) to guide its security program. The CISO needs to implement the framework's controls across the organization. What is the first step in implementing NIST CSF?

   • AConduct a penetration test to identify vulnerabilities before any planning.
   • BCreate a current-state profile by mapping existing controls to the framework's functions.
   • CImmediately purchase new security tools to meet all framework categories.
   • DDefine the target profile without assessing the current state.
   Reveal Solution Discussion Select an answer first
2. 32foundation · easy

   Which activity is a key part of the continuous improvement process for control assurance?

   • ARegularly reviewing monitoring data and updating controls based on findings
   • BFocusing only on technical controls and ignoring process improvements
   • CKeeping monitoring data confidential from all stakeholders
   • DAvoiding changes to controls once they are implemented
   Reveal Solution Discussion Select an answer first
4. 33application · medium

   A company has implemented a control assurance framework and is now in the monitoring phase. The CISO wants to ensure that the monitoring process itself is effective. What is a key characteristic of an effective monitoring process?

   • AIt produces reports that are only reviewed annually.
   • BIt relies on manual data collection without automation.
   • CIt includes defined thresholds and triggers that initiate corrective actions.
   • DIt focuses exclusively on technical controls and ignores process controls.
   Reveal Solution Discussion Select an answer first
5. 34expert · hard

   A company has a mature control assurance framework but is experiencing alert fatigue, causing the security team to miss critical control failures. The CISO needs to improve the monitoring process without reducing overall assurance. Which action is most effective?

   • AIncrease the number of alerts by adding more monitoring tools.
   • BAssign all alerts to a single analyst to ensure accountability.
   • CTune monitoring rules to reduce false positives and prioritize alerts based on risk.
   • DDisable all alerts and rely on monthly manual reviews.
   Reveal Solution Discussion Select an answer first
6. 35application · medium

   A healthcare organization has adopted the HITRUST CSF and must implement the required controls. The implementation team has limited resources and needs to prioritize actions that will have the greatest impact on achieving certification. What should the CISO direct the team to do first?

   • AConduct a gap analysis against HITRUST requirements and develop a remediation roadmap.
   • BDefer all implementation until after the certification audit to avoid wasted effort.
   • CImmediately implement all HITRUST controls simultaneously to accelerate certification.
   • DFocus only on technical controls, as HITRUST does not require policy or procedural controls.
   Reveal Solution Discussion Select an answer first