Try our Free Demo Practice Tests for Comprehensive CGRC Exam Preparation

What is the purpose of a security control baseline?

An organization has implemented network segmentation as a security control to prevent unauthorized access to sensitive data. However, the organization has recently experienced a data breach in which an attacker was able to move laterally between different segments of the network. Which of the following is the most likely reason for the failure of this control?

What are the types of authorization decisions that can be given by an authorizing official? Select all that apply.

What are the types of authorization decisions that can be given by an authorizing official? Select all that apply.

One Tech's AO has been informed of a significant change in the threat landscape, which increases the likelihood of a previously low-impact vulnerability being exploited. What should the AO do in response to this new information?