Security and Risk Management
Question #137
During a daily scrum, a developer publicly accuses another of intentionally introducing a security vulnerability. How should the project manager handle this?
A. Consult a public database like CVE to see if the vulnerability is documented.
B. Instruct the accuser to rewrite the code immediately, assuming their assessment is correct.
C. Escalate the matter to HR as a behavioral issue without further technical investigation.
D. Talk individually with both parties to assess the technical facts and address the issue privately.
Domain Concept: Security and Risk Management
This scenario evaluates management-level decision making in Security and Risk Management. In CISSP exam scenarios, evaluate answers through executive governance, risk assessment, life safety, and due diligence before implementing technical controls.
💡 View the Answer & Detailed Explanation
The correct answer to this scenario-based question requires an understanding of the CISSP Managerial Mindset. Register to view our in-depth explanation and access 1100+ adaptive questions completely free.