Exam 100-160 Topic 1 Question 206 Discussion

An information security assessment is performed to evaluate the security posture of an IT system. Its main purpose is to identify and mitigate security vulnerabilities and risks that might impact the confidentiality, integrity, and availability of information assets. By conducting a thorough assessment, organizations can identify weaknesses, implement appropriate controls, and ensure the overall security of their systems. Therefore, option B, to identify and mitigate security vulnerabilities and risks, is the most accurate description of the purpose of an information security assessment.