CISA Certified Information Systems Auditor – Question1347

Which of the following is the BEST indication that an organization’s vulnerability identification capability has achieved a high level of maturity?

A.
The organization collaborates with relevant partners to correlate vulnerability data.
B. Known application vulnerabilities are manually categorized and prioritized.
C. Vulnerability management tools are tailored for specific operating systems.
D. Tools are in place to periodically identity new and updated vulnerabilities.

Correct Answer: D