Which of the following components should be executed by an outside vendor?

A Chief Information Security Officer (CISO) is running a test to evaluate the security of the corporate network and attached devices.

Which of the following components should be executed by an outside vendor?
A . Penetration tests
B . Vulnerability assessment
C . Tabletop exercises
D . Blue-team operations

View Answer

Answer: A