Senior management has just accepted the risk of noncompliance with a new regulation. What should the information security manager do NEXT?
To help ensure that an information security training program is MOST effective, its contents should be:
When a large organization discovers that it is the subject of a network probe, which of the following actions should be taken?
A company is considering a new automated system that requires implementation of wireless devices for data capture. Even though wireless is not an approved technology, senior management has accepted the risk and approved a Proof-of-Concept (POC) to evaluate the technology and proposed solution. Which of the following is the information security manager s BEST course of action?
