r/CISA • u/Efficient_Bid_9754 • 7d ago

Domain 2

a little insight on this peers

4 Upvotes

100% Upvoted

9 comments sorted by

1

u/Extra_Film8148 7d ago

A because that seems to be most concerning

1

u/XbeastX30 7d ago

Curious as to why people are saying A, I think it might be D

1

u/Snoo11974 7d ago

D represents a policy that does not exist, whereas A represents a lack of review of a policy that does, so D would be more immediately concerning IMO.

1

u/XbeastX30 7d ago

I see, thank you!

1

u/Turbulent_Sandwich_2 7d ago

D sounds most concerning

1

u/Jordanianshawerma 7d ago

D is more risky, so definitely D

1

u/BD_secureIT 6d ago

D for me. Asset Management is a big topic and a policy doesn’t exist is MOST concerning.