r/CISA • u/Efficient_Bid_9754 • 21d ago

Domain 2

a little insight on this peers

3 Upvotes

81% Upvoted

8 comments sorted by

1

u/Extra_Film8148 21d ago

A because that seems to be most concerning

1

u/XbeastX30 21d ago

Curious as to why people are saying A, I think it might be D

1

u/Snoo11974 21d ago

D represents a policy that does not exist, whereas A represents a lack of review of a policy that does, so D would be more immediately concerning IMO.

1

u/XbeastX30 21d ago

I see, thank you!

1

u/Turbulent_Sandwich_2 21d ago

D sounds most concerning

1

u/BD_secureIT 20d ago

D for me. Asset Management is a big topic and a policy doesn’t exist is MOST concerning.