Risk managers plan to compare existing security controls to a set of best practice controls described in a technical hardening standard. Which technique would be most helpful to the risk managers in this scenario?

Answer 1

In this scenario, the most helpful technique for the risk managers would be a gap analysis. A gap analysis involves comparing the existing security controls against the best practice controls outlined in the technical hardening standard to identify discrepancies or areas lacking sufficient security measures. This process helps risk managers understand the extent of compliance with best practices, assess the effectiveness of current controls, and develop strategies to mitigate identified risks by implementing necessary improvements to achieve the desired security posture.