CISA Certified Information Systems Auditor – Question1088

An organization has purchased a security information and event management (SIEM) tool. Which of the following would be MOST important to consider before implementation?

A.
The contract with the SIEM vendor
B. Controls to be monitored
C. Available technical support
D. Reporting capabilities

Correct Answer: B