ISC2 CISSP Practice Question
A global manufacturing company has migrated its engineering design systems to a distributed architecture with processing in public cloud services and proprietary data stored in company data centers. The CISO needs to approve a security audit strategy. Which approach would BEST address the security concerns of this distributed environment?
Focus security evaluation efforts on the cloud services as they present greater external exposure
Conduct coordinated assessments with specialized expertise for each infrastructure component
Perform evaluations of data center security followed by cloud security
Apply security testing procedures across the architecture