CompTIA Advanced Security Practitioner - CASP(CAS-003)

Set · v2020-03-20

A Chief Information Security Officer (CISO) of a large financial institution undergoing an IT transformation program wants to embed security across the business
rapidly and across as many layers of the business as possible to achieve quick wins and reduce risk to the organization. Which of the following business areas
should the CISO target FIRST to best meet the objective?

Select oneProgrammers and developers should be targeted to ensure secure coding practices, including automated code reviews with remediation processes, areimplemented immediately.Human resources should be targeted to ensure all new employees undertake security awareness and compliance training to reduce the impact of phishing andransomware attacks.The project management office should be targeted to ensure security is managed and included at all levels of the project management cycle for new and inflight projects.Risk assurance teams should be targeted to help identify key business unit security risks that can be aggregated across the organization to produce a riskposture dashboard for executive management.

Questions & review

CorrectIncorrectUnanswered

Question link

About this exam

CompTIA Advanced Security Practitioner - CASP certification validates advanced-level competency in risk management, enterprise security operations and architecture, research and collaboration, and integration of enterprise security.