ISC2 CISSP Practice Question
A multinational corporation is planning to conduct a comprehensive security assessment of their infrastructure, which includes on-premises data centers in three countries, multiple SaaS applications, and a hybrid cloud deployment with workloads split between their private cloud and AWS. Which of the following approaches would BEST address the security assessment challenges across these diverse locations?
Assess each location independently using separate teams and methodologies
Develop a unified assessment framework with location-specific testing protocols
Outsource the assessment to different third-party vendors based on their expertise with each environment
Apply identical testing procedures across all environments to ensure consistency