Exam CIS-SIR topic 1 question 46 discussion

Option B, "Allow SIR Teams to control the assignment of security roles," is not necessarily "wrong," but it may not be one of the primary reasons for separating the Platform Administrator and Security Incident Administrator roles in the context of maintaining security and compliance in ServiceNow. Option E instead preserve the security image in the company: Having a clear separation of roles, especially when it comes to security-related tasks, can help enhance the company's security posture and reputation. It demonstrates a commitment to maintaining a strong security culture and minimizes the potential for unauthorized access or mishandling of security incidents.

right answers

i am guessing A B and C Explanation: here are my thought processes - By separating the Platform (System) Administrator role from the Security Incident administrator role, organizations can restrict access to security incident data to those who need it. (a) - By separating the Platform (System) Administrator role from the Security Incident administrator role, organizations can allow the SIR team to control the assignment of security roles. This ensures that only those who are authorized to do so have access to security incident data and can perform security incident response activities. (b) - By separating the Platform (System) Administrator role from the Security Incident administrator role, organizations can implement the principle of separation of duty. This helps to prevent unauthorized access to security incident data and ensures that security incidents are responded to effectively. (c)