Question

The board of a financial services company has requested that the senior security analyst acts as a cybersecurity advisor in order to comply with recent federal legislation. The analyst is required to give a report on current cybersecurity and threat trends in the financial services industry at the next board meeting.

Which of the following would be the BEST methods to prepare this report? (Choose two.)

A. Review the CVE database for critical exploits over the past year
B. Use social media to contact industry analysts
C. Use intelligence gathered from the Internet relay chat channels
D. Request information from security vendors and government agencies
E. Perform a penetration test of the competitorג€™s network and share the results with the board

Answer 1

The best methods to prepare a report on cybersecurity trends in the financial services industry are reviewing the CVE database and requesting information from security vendors and government agencies. These ensure credible data and reflect the latest threats while maintaining compliance with federal legislation. The correct options are (A) and (D)

Step-by-step explanation:

To prepare a report on current cybersecurity and threat trends in the financial services industry, the senior security analyst should explore thoroughly vetted and reputable sources. Considering the options provided, the two best methods to prepare this report would be:

1. Reviewing the CVE database for critical exploits over the past year. This database is a public record of common vulnerabilities and exposures that can provide insights into prevalent security threats.
2. Requesting information from security vendors and government agencies. Such entities are frequently at the forefront of cybersecurity developments and can offer expert analyses and statistics.

These methods would not only assure the use of credible data but also ensure the report is reflective of the latest and most pressing threats, in compliance with federal legislation. It is important to avoid unethical and illegal actions, such as performing penetration tests on competitors' networks, which could lead to serious legal repercussions and undermine the company's integrity.