CISA-Testing Concept-Single Sign On (SSO) (Domain-5)

Point to remember for CISA Exam:

(1)When CISA question is about major risk of SSO, our answer should be:
-SSO acts as single authentication point for multiple applications.
-SSO acts a single point of failure.
If both the options are there, please select ‘SSO acts as single authentication point for multiple applications’. This is more specific answer as compared to ‘SSO acts a single point of failure’.

(2)When CISA question is about most important control for SSO, our answer should be implementation of strong password policy.