1.3 Define and Implement Information Security Strategies ISSMP Practice Questions (Page 6)

Questions 26–26

1. 26application · medium

   A financial services firm is launching a new mobile payment application. The project sponsor wants to accelerate the timeline by skipping the security requirements elicitation phase, arguing that the existing security architecture already covers all systems. As the security manager, what is the most appropriate action?

   • APerform a capacity assessment of the security team to determine if they can handle the new project without additional resources.
   • BProceed with the project, relying on the existing security architecture to provide baseline protection.
   • CImplement a generic security architecture template used in previous projects to save time.
   • DConduct a focused security requirements elicitation workshop with stakeholders to identify specific needs for the mobile payment app.
   Reveal Solution Discussion Select an answer first