ISC2 CISSP Practice Question
A global manufacturing company has migrated its engineering design systems to a distributed architecture with processing in public cloud services and proprietary data stored in company data centers. The CISO needs to approve a security audit strategy. Which approach would BEST address the security concerns of this distributed environment?
Conduct coordinated assessments with specialized expertise for each infrastructure component
Apply security testing procedures across the architecture
Perform evaluations of data center security followed by cloud security
Focus security evaluation efforts on the cloud services as they present greater external exposure