Question 266
When implementing security controls, an information security manager must PRIMARILY focus on:
Question 267
The PRIMARY goal of a corporate risk management program is to ensure that an organization's:
Question 268
When contracting with an outsourcer to provide security administration, the MOST important contractual element is the:
Question 269
The MOST important objective of monitoring key risk indicators (KRIs) related to information security is to:
Question 270
A risk profile supports effective security decisions PRIMARILY because it: