Which of the following activities should take place FIRST when a security patch for Internet software is received from a vendor?

exams CISM V1 CISM exam 0 Comments

Which of the following activities should take place FIRST when a security patch for Internet software is received from a vendor?
A . The patch should be applied to critical systems.
B . The patch should be validated using a hash algorithm.
C . The patch should be evaluated in a testing environment.
D . The patch should be deployed quickly to systems that are vulnerable.

Answer: C