iSACA Cybersecurity Fundamentals Certification Practice Exam

What type of vulnerability results from a failure to monitor logs?

1. Technical

2. Process

3. Organizational

4. Emergent

The correct answer is: Process

A failure to monitor logs typically leads to a vulnerability categorized as a process vulnerability. This type of vulnerability stems from inadequate procedures or practices within an organization regarding how they manage and respond to their data and system activities. Monitoring logs is an essential component of identifying and responding to potential security threats. When an organization does not have effective processes in place to review and analyze logs, it can miss signs of unauthorized access, anomalies, or breaches. This lack of due diligence in logging oversight creates vulnerabilities that could have been mitigated with a well-defined process in place. By establishing regular log monitoring procedures, organizations can improve their security posture by timely identifying threats and responding to incidents, thus reducing the overall risk of security breaches. Proper processes are fundamental to ensuring cybersecurity practices are not only designed but also actively enforced and followed.