What is the primary difference between regulations and standards?

As a new CISO at a large healthcare company you are told that everyone has to badge in to get in the building. Below your office window you notice a door that is normally propped open during the day for groups of people to take breaks outside. Upon looking closer you see there is no badge reader. What should you do?

To get an Information Security project back on schedule, which of the following will provide the MOST help?

An organization information security policy serves to

Within an organization's vulnerability management program, who has the responsibility to implement remediation actions?