Question

An information security manager maintains a risk register that was last fully assessed nine months ago. A newly disclosed critical vulnerability is now being actively exploited in the wild against a technology stack the organization uses heavily in a revenue-generating application. What should the information security manager do FIRST?

Accepted Answer

Reassess the affected risk scenarios in the register to reflect the increased likelihood and current threat intelligence

Answer

Immediately deploy the vendor patch to all affected production systems

Answer

Escalate the issue to the board and request emergency funding for compensating controls

Answer

Purchase additional cyber insurance coverage to transfer the heightened exposure