Question

A risk practitioner reviews an organization where individual business units independently procure and deploy cloud services and applications without central coordination. This has resulted in duplicated tools, inconsistent security configurations, and integration gaps between systems. Which enterprise architecture practice would MOST effectively reduce the underlying risk exposure?

Accepted Answer

Establishing and enforcing a target-state architecture with approved technology standards and a governance review for new deployments

Answer

Requiring each business unit to purchase cyber insurance covering its independently deployed systems

Answer

Increasing the frequency of vulnerability scans across all business unit environments

Answer

Directing internal audit to catalog all existing applications and report findings quarterly