After updating password standards, an information security manager is alerted by various application administrators that...

Vendor: Isaca
Product: CISM
Update on: Jul 25, 2025
Questions: 967

Isaca CISM Question Answer

After updating password standards, an information security manager is alerted by various application administrators that the applications they support are incapable of enforcing these standards. The information security manager's FIRST course of action should be to:

determine the potential impact.

reevaluate the standards.

implement compensating controls.

evaluate the cost of replacing the applications.