Security and Risk Management
Question #36
A financial institution is evaluating a COTS system for electronic records. To meet regulatory requirements like PCI-DSS, which feature should be prioritized?
A. The vendor’s position and market share in the industry.
B. The system’s compatibility with existing financial infrastructure.
C. The system’s policies for managing user sessions securely.
D. The system’s capability to produce detailed audit trails of all user actions.
Domain Concept: Security and Risk Management
This scenario evaluates management-level decision making in Security and Risk Management. In CISSP exam scenarios, evaluate answers through executive governance, risk assessment, life safety, and due diligence before implementing technical controls.
💡 View the Answer & Detailed Explanation
The correct answer to this scenario-based question requires an understanding of the CISSP Managerial Mindset. Register to view our in-depth explanation and access 1100+ adaptive questions completely free.