CISSP Practice Question: In a manufacturing company facing budget cuts, what is the MOST effective…

Correct Answer: A. Focus on critical assets

Explanation (CISSP Manager Logic):

When resources are constrained, managers must apply risk-based prioritization to ensure business continuity. Focusing on critical assets aligns security spend with the organization's most significant risks and high-value targets.

By focusing on critical assets, you:

• Maximize the ROI of limited security budgets.
• Ensure protection of the most vital business functions.
• Reduce the organization's overall risk exposure efficiently.

While the other options are relevant, they fall short because:

• B: Assessing all systems is resource-intensive and dilutes focus, leading to inadequate coverage of high-risk areas.
• C: Automated tools are useful but cannot replace the nuanced, qualitative analysis required for critical system assessments.
• D: Postponing security activities leaves the organization vulnerable to exploits and ignores the duty of care.

Think like a manager:

Effective security management is about prioritizing resources based on asset value and potential business impact. Always align technical assessments with the organization's risk appetite and financial constraints.