CompTIA CASP+ Practice Test

Who should be contacted FIRST when key software in a banking project is found vulnerable to exploits?

1. Technical support staff

2. Project manager

3. Stakeholders

4. Security team

The correct answer is: Stakeholders

In a scenario where key software in a banking project is found to be vulnerable to exploits, the primary concern is to assess the risk and determine the appropriate response quickly. Contacting stakeholders first is crucial because they have a vested interest in the project's success and the integrity of the financial institution. They may include executives and clients who need to understand the implications of this vulnerability on project timelines, budgets, and overall trust in the organization's capabilities. Stakeholders are often in a position to make strategic decisions, allocate resources, and prioritize actions based on the severity of the vulnerability. Their involvement ensures that the response to the vulnerability aligns with business goals and regulatory requirements, which are particularly stringent in the banking sector. While the security team plays a critical role in assessing and mitigating vulnerabilities, and technical support staff can aid in patching or resolving issues, engaging stakeholders first allows for a comprehensive understanding of the situation and enhances decision-making regarding immediate actions and communication to wider audiences, such as customers or regulatory bodies. This approach emphasizes the importance of governance and accountability in managing vulnerabilities that could affect a banking project's credibility and operational security.