Which of the following should be an information security manager's MOST important concern to ensure admissibility of information security evidence from cyber crimes?
An information security manager is developing a business case for an investment in an information security control. The FIRST step should be to:
A business unit uses e-commerce with a strong password policy. Many customers complain that they cannot remember their password because they are too long and complex. The business unit states it is imperative to improve the customer experience. The information security manager should FIRST.
The PRIMARY reason for assigning classes of sensitivity and criticality to information resources is to provide a basis for:
Which two components PRIMARILY must be assessed in an effective risk analysis?