Question

An organization is considering the purchase of a competitor. To determine the competitor's security posture, the BEST course of action for the organization's

information security manager would be to:

A. assess the security policy of the competitor.

B. assess the key technical controls of the competitor.

C. conduct a penetration test of the competitor.

D. perform a security gap analysis on the competitor.

Correct Answer: A???? or C????? or Others….

______________________

Note

■ Some good websites claim that the correct answer is A ("assess the security policy of the competitor").

■ From my point I think that the correct answer should be C ("conduct a penetration test of the competitor") or B ("assess the key technical controls of the competitor"), BUT NOT C.

■ What is your point of view?

Many thanks!

Answer 1

An organization is considering the purchase of a competitor. To determine the competitor's security posture, the BEST course of action for the organization's information security manager is Assess the security policy of the competitor.

Conduct a penetration test of the competitor is is lengthy process requires a skilled person to do this test and consumes more time.

Assess the key technical controls of the competitor it is covered some technical pat but not whole security part.

Assess the security policy of the competitor is easier process to identify the current security policy and easier to do add additional security mechanism.

Assess the security policy of the competitor is not a complex activity to perform and also it is not consume more time.

Option a