An organization wants to enable the correlation and analysis of security-related events and other recorded data and to support investigations into information security incidents. Which control should it implement?
A.
Use of privileged utility programs
B.
Clock synchronization
C.
Installation of software on operational systems
The answer here is B
B. Clock synchronization
See clause 8.17 Clock Synchronization
Detective control
Control
The clocks of information processing systems used by the organization should be synchronized to approved time sources.
Purpose
To enable the correlation and analysis of security-related events and other recorded data, and to support investigations into information security incidents.
upvoted 1 times
...
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Acrisius
2 months, 1 week ago