CompTIA CySA+ CS0-003 Practice Question
Your cybersecurity team has uncovered a significant flaw in a critical piece of financial software that requires immediate attention. Your organization's security protocols mandate remediation within a very short timeframe, but the software vendor has agreed to deliver patches on a different timeline that extends beyond your internal requirements. What is the most appropriate action to take to ensure compliance with your organization's security protocols without violating the existing external agreement?
Implement a temporary fix until the vendor is able to release the official update.
Immediately renegotiate the terms of the agreement to ensure quicker response times for future patches.
Disregard the organization’s internal remediation timeline in favor of the vendor's schedule.
Continue normal operations and wait for the vendor's update in accordance with the existing timeline.