Three in one week, good job all, so proud to be a part of our community. and another congrats to @Kate Shairs @Devdutt Jha @James Bonner

I just wanted to say thank you to this group and @Vincent Primiani. It has been a very helpful resource for the content of course, but also for the company and support in kind, like-minded people on the same journey. I wish every one of you nothing but success and hope to reconnect for the next challenge!

I’ve officially passed my CISSP exam! A huge shoutout to this incredible community specially @Vincent Primiani , the cissp.app practice questions, and the insightful live group sessions for pushing me over the finish line. Appreciate all the support here! 🚀🎉

A business partner requires an always-on site-to-site tunnel into a shared application segment. Their security posture is unknown, and the contract is already signed. What should the network security manager do FIRST? A. Terminate the tunnel in a dedicated screened segment B. Assess the partner's security posture against connection requirements C. Route all partner traffic through the inspection stack D. Enforce mutual authentication and approved cipher policy (Explain your answer for more points in the comments!) Come back for the answer tomorrow, or study more now!

An organization is undergoing a complex divestiture of a business unit. What is the security manager's PRIMARY responsibility to ensure alignment with business strategy? Conducting a comprehensive risk assessment of the remaining infrastructure Your Answer Defining and negotiating the security requirements in the transition service agreement Correct Revoking all logical access for employees transitioning to the new entity Updating the security policy to reflect the organization's reduced risk profile Explanation: Correct Answer B. Defining and negotiating the security requirements in the transition service agreement Explanation (CISSP Manager Logic) During a divestiture, the Transition Service Agreement (TSA) is the critical document that governs how services (and data) are shared until the split is complete. The security manager must ensure that security obligations, liability, and data protection standards are explicitly defined to protect the parent organization's interests while enabling business continuity. By defining and negotiating these requirements, you Ensure legal and regulatory compliance during the high-risk transition phase. Protect the parent organization from liabilities arising from the divested unit's actions. Align security efforts directly with the strategic goals of the business transaction. A: Risk assessments are necessary, but they are a component of the broader strategy defined in the TSA. C: Revoking access is a tactical task that must follow the timeline and legal constraints established in the TSA. D: Policy updates are a late-stage administrative task that does not address the immediate strategic risks of the divestiture process. Think like a manager Strategic security management in M&A or divestitures requires focusing on the contractual and legal frameworks that define shared risk and operational boundaries.