An Organization Used a Third Party to Conduct a Security

Multiple Choice

An organization used a third party to conduct a security audit and discovered several deficiencies in the cybersecurity program. The findings noted many external vulnerabilities that were not caught by the vulnerability scanning software, numerous weaknesses that allowed lateral movement, and gaps in monitoring that did not detect the activity of the auditors. Based on these findings, which of the following would be the BEST long-term enhancement to the security program?

A) Quarterly external penetration testing
B) Monthly tabletop scenarios
C) Red-team exercises
D) Audit exercises