Certified Incident Handler (CIH) Practice Ecam

What is the CIS security control used to manage all organizational assets connected on premises and in the cloud?

1. Inventory and control of enterprise asset

2. Audit log management

3. Data recovery

4. Account management

The correct answer is: Inventory and control of enterprise asset

The choice focusing on "Inventory and control of enterprise asset" addresses a fundamental aspect of cybersecurity management: maintaining an accurate and up-to-date inventory of all organizational assets, whether they are located on-premises or in the cloud. This control is essential for organizations to understand what assets they have, where they are located, and how they are being used. By implementing this security control, organizations can effectively manage their hardware and software assets, ensuring that they are properly configured, securely managed, and accounted for. This visibility is crucial for identifying potential vulnerabilities, ensuring compliance with regulatory requirements, and facilitating incident response efforts. On the other hand, the other options—such as audit log management, data recovery, and account management—while important components of a comprehensive security strategy, do not specifically focus on the inventory and control aspect of organizational assets. Each of those controls addresses different areas of security, such as monitoring activities, recovering lost or damaged data, and managing user accounts, but they do not encompass the broad oversight required for asset management. Hence, focusing on the inventory and control of enterprise assets stands out as the primary solution to meet the needs described in the question.