From an information security perspective, information that no longer supports the main purpose of the business should be:
After assessing and mitigating the risks of a web application, who should decide on the acceptance of residual application risks?
A penetration test was conducted by an accredited third party. Which of the following should be the information security manager's FIRST
To ensure that payroll systems continue on in an event of a hurricane hitting a data center, what would be the FIRS T crucial step an information security manager would take in ensuring business continuity planning?
Which of the following circumstances would MOST likely require a review and update to an organization's information security incident response plan?