Câu 123: 712-50: EC-Council Certified CISO

A business unit within your organization intends to deploy a new technology in a manner that places it in violation of existing information security standards. What immediate action should the information security manager take?

1. A. Enforce the existing security standards and do not allow the deployment of the new technology.
2. B. If the risks associated with that technology are not already identified, perform a risk analysis to quantify the risk, and allow the business unit to proceed based on the identified risk level. — đáp án hiện tại
3. C. Amend the standard to permit the deployment.
4. D. Permit a 90-day window to see if an issue occurs and then amend the standard if there are no issues.