Which of the following is a social engineering attack method?

An organization's security policy mandates that all new employees must receive appropriate security awareness training. Which of the following metrics would BEST assure compliance with this policy?

During a review of a production schedule, an IS auditor observes that a staff member is not complying with mandatory operational procedures. The auditor's NEXT step should be to:

Which of the following is the BEST way to mitigate the impact of ransomware attacks?

Which of the following should an IS auditor review FIRST when planning a customer data privacy audit?