A county runs vulnerability scans on rapidly changing cloud citizen apps only once per year. Risk and change rate are both high. What should leadership conclude about the assessment strategy?
Select an answer to reveal the explanation.
Short Explanation
Apps that reinvent themselves every sprint do not get a once-a-year checkup like a museum exhibit. If risk and change are high, speed up the testing rhythm—and check that your strategy still fits reality.
Full Explanation
Assessment strategies must be validated against current risk, system criticality, and rate of change. Annual-only scanning for high-churn cloud applications leaves long windows of untested exposure. Leadership should increase frequency or continuous testing approaches and periodically reconfirm that the strategy remains fit for purpose.