Which of the following is the MOST important consideration for designing an effective information security governance framework?

In the process of deploying a new e-mail system, an information security manager would like to ensure the confidentiality of messages while in transit. Which of the following is the MOST appropriate method to ensure data confidentiality in a new e-mail system implementation?

When aligning an organization's information security program with other risk and control activities, it is MOST important to:

Which of the following metrics would BEST determine the effectiveness of an application security testing program?

Which of the following is the PRIMARY reason to conduct periodic business impact assessments?