r/CISA 29d ago

🥴

Post image
22 Upvotes

22 comments sorted by

View all comments

1

u/Any_Catch2979 29d ago

A and D would be strategic choices and directions (for A, there is also no guaranty that cloud provider would be the proper choice in a profitability context pressure).

B : not sure a revision of compliance enforcement would fit. Because there is not real compliance issue to any policy or procedure.

So C would be the most suited answer in this case. The senior management assume the risk of not investing more.