Which of the following is the PRIMARY objective of implementing IT governance?

Management receives information indicating a high level of risk associated with potential flooding near the organization's data center within the next few years. As a result, a decision has been made to move data center operations to another facility on higher ground. Which approach has been adopted?

Which of ihe following should be done FIRST to effectively define the IT audit universe for an entity with multiple business lines?

A small organization is experiencing rapid growth and plans to create a new information security policy.
Which of the following is MOST relevant to creating the policy?

The BEST access strategy while configuring a firewall would be to: