CompTIA CASP CAS-004 Syllabus Exam Questions Answers

Establish a review committee that assesses the importance of suppliers and ranks them according to contract renewals. At the time of contract renewal, incorporate designs and operational controls into the contracts and a right-to-audit clause. Regularly assess the supplier’s post-contract renewal with a dedicated risk management team.

Establish a team using members from first line risk, the business unit, and vendor management to assess only design security controls of all suppliers. Store findings from the reviews in a database for all other business units and risk teams to reference.

Establish an audit program that regularly reviews all suppliers regardless of the data they access, how they access the data, and the type of data, Review all design and operational controls based on best practice standard and report the finding back to upper management.

Establish a governance program that rates suppliers based on their access to data, the type of data, and how they access the data Assign key controls that are reviewed and managed based on the supplier’s rating. Report finding units that rely on the suppliers and the various risk teams.

when it is passed across a local network.

in memory during processing

when it is written to a system’s solid-state drive.

by an enterprise hardware security module.

NIDS

Application allow list

Sandbox detonation

Endpoint log collection

HIDS

SD-WAN

PAM

Remote access VPN

MFA

Network segmentation

BGP

NAC