A Chief Information Security Officer (CISO) needs to establish a KRI for a particular system. The system holds archives of contr

Question

3 years ago

13

A Chief Information Security Officer (CISO) needs to establish a KRI for a particular system. The system holds archives of contr

acts that are no longer in use. The contracts contain intellectual property and have a data classification of non-public. Which of the following be the BEST risk indicator for this system?
(A) Average minutes of downtime per quarter
(B) Percent of patches applied in the past 30 days
(C) Count of login failures per week
(D) Number of accounts accessing the system per day

Computers and Technology

1 answer:

OLga [1] · Answer 1 · 2021-12-22T11:15:16+03:00

OLga [1]3 years ago

6 0

B. Percent of patches applied in the past 30 days