According to the CIS Controls v8, what is Control 1 (the most foundational control)?

Answer options:

Data Protection

Inventory and Control of Enterprise Assets

Account Management

Malware Defenses

How to approach this question

Recall the very first step in security: You can't protect what you don't know you have.

Full Answer

B.Inventory and Control of Enterprise Assets✓ Correct

Inventory and Control of Enterprise Assets

CIS Control 1 is 'Inventory and Control of Enterprise Assets'. You must actively manage (inventory, track, and correct) all enterprise assets (end-user devices, including portable and mobile; network devices; non-computing/IoT devices; and servers) connected to the infrastructure.

Common mistakes

Thinking software inventory (Control 2) comes first.

Question 35 All questions Question 37

Practice the full CPA ISC Practice Exam 5

82 questions · hints · full answers · grading

More questions from this exam

Q01A service organization provides a cloud-based payroll processing application to its user entities...Medium Q02An auditor is reviewing the shared responsibility model for a client using an Infrastructure as a...Hard Q03A financial institution requires a cloud deployment model that offers the highest level of contro...Medium Q04During an IT audit, you observe that a company uses a 'Hybrid Cloud' architecture. Which scenario...Medium Q05Which component of IT architecture is primarily responsible for translating domain names (like ww...Easy

View all 82 questions →