Which of the following should an IS auditor recommend be done FIRST when an organization is made aware of a new regulation that is likely to impact IT security requirements?
During a review of a production schedule, an IS auditor observes that a staff member is not complying with mandatory operational procedures. The auditor's NEXT step should be to:
Which of the following is a challenge in developing a service level agreement (SLA) for network services?
In which phase of penetration testing would host detection and domain name system (DNS) interrogation be performed?