Câu 49: CAS-003: CompTIA Advanced Security Practitioner (CASP) CAS-003

A government organization operates and maintains several ICS environments. The categorization of one of the ICS environments led to a moderate baseline. The organization has complied a set of applicable security controls based on this categorization. Given that this is a unique environment, which of the following should the organization do NEXT to determine if other security controls should be considered?

1. A. Check for any relevant or required overlays.
2. B. Review enhancements within the current control set.
3. C. Modify to a high-baseline set of controls. — đáp án hiện tại
4. D. Perform continuous monitoring.